A plugin called “Easy WP SMTP” for WordPress has a security issue where it shows the password for the SMTP server in its settings. This means that someone with high-level access to the site can see the password. This may not be helpful to attackers in most situations, but if an administrator’s account is hacked, it could give them valuable information in certain situations.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
