CVE · Medium

CVE-2017-7723 — Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.2.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2017-7723 Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.2.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 1.2.5 1.2.5 2017-04-14

CVE-2017-7723

The Easy WP SMTP plugin for WordPress versions prior to 1.2.5 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the email subject line or message body fields.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.