CVE-2024-3073

The Easy WP SMTP by SendLayer plugin for WordPress through version 2.3.0 exposes SMTP credentials by displaying the server password directly in the settings interface. Administrators with access to plugin settings can view the plaintext SMTP password, which poses a risk if an admin account is compromised, potentially allowing attackers to access email infrastructure in certain scenarios. The vulnerability requires authenticated administrative access to exploit but could facilitate lateral movement or credential harvesting in compromised environments.

Based on public CVE data (MITRE/NVD).