CVE Database /
CVE-2022-42699
CVE · Critical
CVE-2022-42699 — Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.5.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-42699
|
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.5.2 |
Improper Control of Generation of Code ('Code Injection') |
Critical
9.1
|
< 1.5.2
|
1.5.2 |
2022-11-30 |
—
|
CVE-2022-42699
The Easy WP SMTP plugin through version 1.5.1 contains a remote code execution vulnerability that administrators can exploit through the SMTP import and export features, specifically within the admin initialization process. An attacker with administrator privileges could leverage this flaw to execute arbitrary code on the affected server. The vulnerability has been addressed in version 1.5.2 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings