Easy Wp Smtp
Approved changes feed: RSS · Atom
cpe:2.3:a:wp-ecommerce:easy_wp_smtp:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Wp Ecommerce (c37b8af0-ad15-5155-89d8-97c026efc38b) |
|---|---|
| Product | Easy Wp Smtp (26f62b25-3e0c-5fcb-aa81-49feb6fce2d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3073 |
vulnerable | 2026-06-08 06:41:52.354402 |
Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI
LOW (2.7)
The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible for authenticated attackers, with administrative-level access and above, to view the SMTP password for the supplied server. Although this would not be useful for attackers in most cases, if an administrator account becomes compromised this could be useful information to an attacker in a limited environment.
Published: 2024-06-13T08:31:31.059Z
Updated: 2026-04-08T17:15:51.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45833 |
vulnerable | 2026-06-08 05:50:37.298381 |
WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal
MEDIUM (6.8)
Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.
Published: 2022-12-06T21:44:04.790Z
Updated: 2026-04-28T16:07:53.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45829 |
vulnerable | 2026-06-08 05:50:37.291891 |
WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion
HIGH (8.7)
Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress.
Published: 2022-12-06T21:53:04.536Z
Updated: 2026-04-28T16:07:53.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42699 |
vulnerable | 2026-06-08 05:49:30.158056 |
WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
CRITICAL (9.1)
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.
Published: 2022-12-06T22:00:55.421Z
Updated: 2026-04-28T16:07:50.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3334 |
vulnerable | 2026-06-08 05:48:20.563440 |
Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection
The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
Published: 2022-10-31T00:00:00.000Z
Updated: 2025-05-06T15:42:13.352Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35234 |
vulnerable | 2026-06-08 05:25:00.984779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25141 |
vulnerable | 2026-06-08 05:13:42.001684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7723 |
vulnerable | 2026-06-08 05:10:05.952722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.