Easy Wp Smtp@* Security Vulnerabilities and Issues — Easy Wp Smtp@* CVE List

Lucene search

Wp-ecommerceEasy Wp Smtp*

3 matches found

CVE•added 2020/12/14 3:15 a.m.•205 views

CVE-2020-35234

The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file (such as #############_debug_log.txt) that contains all pass...

7.5CVSS7.5AI score0.72502EPSS

In wildWeb

CVE•added 2024/06/13 9:15 a.m.•54 views

CVE-2024-3073

The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible ...

2.7CVSS3.9AI score0.00231EPSS

CVE•added 2022/10/31 4:15 p.m.•48 views

CVE-2022-3334

The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

7.2CVSS7.1AI score0.00323EPSS

Web