Lucene search
+L

5899 matches found

CNNVD
CNNVD
added 2025/01/16 12:00 a.m.6 views

WordPress plugin Stars SMTP Mailer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.6AI score0.00412EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:00 a.m.10 views

PT-2025-4886 · Myriad Solutionz · Myriad Solutionz Stars Smtp Mailer

Name of the Vulnerable Software and Affected Versions: Myriad Solutionz Stars SMTP Mailer versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means that an attacker can inject malicious scripts...

7.1CVSS9.2AI score0.00412EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.8 views

WordPress plugin turboSMTP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00334EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/13 2:15 p.m.19 views

CVE-2025-22800

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

8.8CVSS0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/13 1:11 p.m.59 views

CVE-2025-22800

CVE-2025-22800 affects the WordPress Post SMTP plugin (versions 2.9.11 and earlier). The issue is described as a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access with high impact to confidentiality, integrity, and av...

8.8CVSS7.2AI score0.00385EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/13 1:11 p.m.36 views

CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

4.3CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/13 1:11 p.m.12 views

CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

4.3CVSS8.5AI score0.00385EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/13 1:11 p.m.8 views

CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

4.3CVSS7.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/13 12:00 a.m.27 views

PT-2025-4709 · Post Smtp · Post Smtp

Name of the Vulnerable Software and Affected Versions: Post SMTP versions 2.9.11 and earlier Description: The issue is related to a Missing Authorization vulnerability in Post SMTP, which allows exploiting incorrectly configured access control security levels. Recommendations: For Post SMTP...

8.8CVSS9.1AI score0.00385EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/01/13 12:00 a.m.12 views

WordPress plugin Post SMTP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.2AI score0.00385EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 9:58 p.m.11 views

WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Post SMTP versions = 2.9.11...

8.8CVSS7AI score0.00385EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2024/12/19 9:31 p.m.23 views

GoPhish sends cleartext passwords

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS7.1AI score0.00365EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/12/19 9:31 p.m.25 views

GHSA-RV83-H68Q-C4WQ GoPhish sends cleartext passwords

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS7.5AI score0.00365EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/19 7:15 p.m.51 views

CVE-2024-55196

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS0.00365EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/19 12:00 a.m.102 views

CVE-2024-55196

CVE-2024-55196 concerns GoPhish v0.12.1 with a misconfiguration in the mail-server credentials handling. The vulnerability arises from insufficiently protected credentials in the Mail Server Configuration, enabling an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS6.9AI score0.00365EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/19 12:00 a.m.12 views

CVE-2024-55196

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.1AI score0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/16 4:15 p.m.27 views

CVE-2024-56003

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through = 1.0.1...

4.3CVSS0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/16 3:54 p.m.32 views

CVE-2024-56003 WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through = 1.0.1...

4.3CVSS0.00353EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 3:54 p.m.51 views

CVE-2024-56003

CVE-2024-56003 is a Missing Authorization vulnerability in Caldera SMTP Mailer. The Red Hat entry and the CVE description indicate impact on Caldera SMTP Mailer versions from unspecified earlier releases up to 1.0.1, with the issue originating from missing authorization. No exploitation details a...

4.3CVSS7.2AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 3:54 p.m.10 views

CVE-2024-56003 WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer.This issue affects Caldera SMTP Mailer: from n/a through 1.0.1...

4.3CVSS7.2AI score0.00353EPSS
SaveExploits0References1
Rows per page
Query Builder