Wp-ecommerce Easy_wp_smtp
8 CVEs affecting Wp-ecommerce Easy_wp_smtp. Latest disclosed: 2024-06-13. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25141 | Critical | 9.8 | 2023-06-07 | The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks o… |
CVE-2022-42699 | Critical | 9.1 | 2022-12-06 | Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress. |
CVE-2022-45829 | High | 8.7 | 2022-12-06 | Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress. |
CVE-2020-35234 | High | 7.5 | 2020-12-14 | The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list th… |
CVE-2022-3334 | High | 7.2 | 2022-10-31 | The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin impor… |
CVE-2022-45833 | Medium | 6.8 | 2022-12-06 | Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress. |
CVE-2017-7723 | Medium | 6.1 | 2017-04-24 | XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body. |
CVE-2024-3073 | Low | 2.7 | 2024-06-13 | The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and inclu… |