Now officially on WordPress.org

CVE Database / CVE-2022-45829

CVE · High

CVE-2022-45829 — Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.5.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-45829 Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.5.2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') High 8.7 < 1.5.2 1.5.2 2022-11-30 —

CVE-2022-45829

The Easy WP SMTP plugin for WordPress before version 1.5.2 contains a flaw in its import and export functionality for SMTP settings that permits administrators to remove arbitrary files from the server. This vulnerability could allow high-privileged users to delete essential website files and compromise site operations. The issue affects all versions through 1.5.1.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings