CVE-2024-6694: Storing Passwords in a Recoverable Format

The WP Mail SMTP plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 4.0.1. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible for authenticated attackers, with...

PT-2024-23604

Name of the Vulnerable Software and Affected Versions The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin versions prior to 2.3.1 Description The plugin is vulnerable to information exposure due to providing the SMTP password in the SMTP Password field when viewing the settings...

CVE-2024-3073: Storing Passwords in a Recoverable Format

The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possibl...

PT-2017-19433

Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System versions prior to 2.50 Description The issue allows for a DLL hijacking attack, which can provide administrative level access on the target Windows system. Recommendations For versions prior to 2.50, update t...