WP Mail SMTP Pro < 3.8.1 - Unauthenticated Email Address Disclosure

2023-10-1200:00:00

wpscan.com

plugin

authorisation

is_print_page

function

unauthenticated users

sensitive information

email address

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

JSON

Description The plugin does not have authorisation in the is_print_page() function, allowing unauthenticated users to retrieve sensitive information such as email address

CPENameOperatorVersion
eq3.8.1

CPE	Name	Operator	Version
		eq	3.8.1

References

www.wordfence.com/threat-intel/vulnerabilities/id/a813251b-a4c1-4b23-ad03-dcc1f4f19eb9