Easy Wp Smtp Security Vulnerabilities and Issues — Easy Wp Smtp CVE List

Wp-ecommerceEasy Wp Smtp

8 matches found

CVE•added 2020/12/14 2:21 a.m.•233 views

CVE-2020-35234

The CVE refers to the WordPress plugin Easy WP SMTP (versions before 1.4.4). A directory-listing issue in wp-content/plugins/easy-wp-smtp/ exposes a log file (e.g., _______debug_log.txt) that contains password-reset links. An attacker can trigger a password reset for the Administrator account and...

7.5CVSS7.5AI score0.64603EPSS

In wildWeb

CVE•added 2023/06/07 1:51 a.m.•75 views

CVE-2019-25141

CVE-2019-25141 affects the Easy WP SMTP WordPress plugin up to version 1.3.9. The root cause is missing capability checks on the admin_init() function plus insufficient input validation, enabling unauthenticated attackers to modify plugin settings and arbitrary site options, including injecting n...

9.8CVSS9.3AI score0.04498EPSS

In wild

CVE•added 2024/06/13 8:31 a.m.•72 views

CVE-2024-3073

CVE-2024-3073 : Easy WP SMTP by SendLayer (WordPress plugin)

2.7CVSS3.9AI score0.00336EPSS

CVE•added 2022/12/06 10:0 p.m.•69 views

CVE-2022-42699

CVE-2022-42699 affects the WordPress Easy WP SMTP plugin (versions 1.5.1 and earlier). The vulnerability is authenticated remote code execution in the plugin’s auth component. CVE details indicate a network-exposed vector with low attack complexity, requiring low privileges and no user interactio...

9.1CVSS8.3AI score0.01319EPSS

CVE•added 2022/12/06 9:44 p.m.•68 views

CVE-2022-45833

CVE-2022-45833 is an authenticated path traversal vulnerability in WordPress Easy WP SMTP plugin versions ≤ 1.5.1. The issue, documented across multiple sources, allows traversal of directories in affected installations; exact exploit details are not provided in the initial/dependent documents. R...

6.8CVSS6.8AI score0.0077EPSS

CVE•added 2022/10/31 12:0 a.m.•66 views

CVE-2022-3334

Summary: CVE-2022-3334 affects the WordPress plugin Easy WP SMTP, versions

7.2CVSS7.1AI score0.01126EPSS

Web

CVE•added 2022/12/06 9:53 p.m.•65 views

CVE-2022-45829

CVE-2022-45829 affects the WordPress Easy WP SMTP plugin, specifically versions <= 1.5.1. The vulnerability is an authenticated path traversal in the plugin, allowing traversal to sensitive files. Several sources also note potential arbitrary file deletion as part of the impact for affected ve...

8.7CVSS7.8AI score0.00839EPSS

CVE•added 2017/04/24 6:0 p.m.•46 views

CVE-2017-7723

The CVE-2017-7723 entry concerns the WordPress plugin Easy WP SMTP, where a cross-site scripting (XSS) flaw exists in versions prior to 1.2.5. The vulnerability allows injection and execution of arbitrary scripts via the e-mail subject or body, as described across multiple sources (including NVD/...

6.1CVSS5.9AI score0.00775EPSS