CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-45833 | Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more [easy-wp-smtp] < 1.5.2 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Medium 6.8 | < 1.5.2 | 1.5.2 | 2022-11-30 | — |
The Easy WP SMTP plugin through version 1.5.1 contains a directory traversal vulnerability in its SMTP import/export functionality triggered during the admin_init action, enabling administrators to access and read arbitrary files from the server that may contain confidential data. The flaw was remedied in version 1.5.2.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.