CVE-2024-13908

CVE-2024-13908 pertains to the WordPress plugin SMTP by BestWebSoft, where arbitrary file uploads are possible due to missing file type validation in the save_options function across versions up to 1.1.9. The vulnerability requires authenticated Administrator+-level access to exploit and may enab...

CVE-2017-18518

The CVE-2017-18518 entry concerns the WordPress plugin bws-smtp (BestWebSoft) before version 1.1.0 , which has multiple XSS vulnerabilities. The connected nuclei template confirms the vulnerability is a cross-site scripting issue affecting that plugin. The impact stated in the connected document ...