WordPress plugin
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High3
- Medium2
- Low2
All Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Low2.7 | Exposure of Sensitive Information via the UI ≤2.3.0Update to 2.3.1 | CVE-2024-3073 | |
| Medium6.5 | Authenticated (Admin+) Arbitrary File Deletion ≤1.5.1Update to 1.5.2 | CVE-2022-45829 | |
| High7.2 | Authenticated (Admin+) Remote Code Execution ≤1.5.1Update to 1.5.2 | CVE-2022-42699 | |
| Low2.7 | Authenticated (Admin+) Directory Traversal ≤1.5.1Update to 1.5.2 | CVE-2022-45833 | |
| High7.2 | Authenticated (Administrator+) PHP Object Injection ≤1.4.9Update to 1.5.0 | CVE-2022-3334 | |
| High8.1 | Sensitive Information Disclosure ≤1.4.2Update to 1.4.3 | CVE-2020-35234 | |
| Critical9.8 | Missing Authorization to Arbitrary Options Update <1.3.9.1Update to 1.3.9.1 | CVE-2019-25141 | |
| Medium6.1 | Cross-Site Scripting <1.2.5Update to 1.2.5 | CVE-2017-7723 |
- Low2.7Exposure of Sensitive Information via the UI
≤2.3.0Update to 2.3.1
- Medium6.5Authenticated (Admin+) Arbitrary File Deletion
≤1.5.1Update to 1.5.2
- High7.2Authenticated (Admin+) Remote Code Execution
≤1.5.1Update to 1.5.2
- Low2.7Authenticated (Admin+) Directory Traversal
≤1.5.1Update to 1.5.2
- High7.2Authenticated (Administrator+) PHP Object Injection
≤1.4.9Update to 1.5.0
- High8.1Sensitive Information Disclosure
≤1.4.2Update to 1.4.3
- Critical9.8Missing Authorization to Arbitrary Options Update
<1.3.9.1Update to 1.3.9.1
- Medium6.1Cross-Site Scripting
<1.2.5Update to 1.2.5
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more: common questions
Does Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more: 1 critical, 3 high, 2 medium, 2 low. None are known to affect version null.
How do I check which version of Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more vulnerability?
CVE-2024-3073, published Jun 12, 2024: Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI. Severity: Low (CVSS 2.7).
Is any Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more vulnerability listed in CISA KEV?
No. None of the known Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more vulnerabilities is currently listed in the CISA KEV catalog.