Wp-ecommerceEasy Wp Smtp*
3 matches found
CVE-2020-35234
The CVE refers to the WordPress plugin Easy WP SMTP (versions before 1.4.4). A directory-listing issue in wp-content/plugins/easy-wp-smtp/ exposes a log file (e.g., _______debug_log.txt) that contains password-reset links. An attacker can trigger a password reset for the Administrator account and...
7.5CVSS7.5AI score0.64603EPSS
SaveIn wildWeb