CVE-2024-6694

The WP Mail SMTP plugin for WordPress contains a security flaw that allows unauthorized users with administrative access or higher to obtain sensitive email password information when viewing the plugin's settings page. This vulnerability affects all versions of the plugin up to and including 4.0.1, potentially providing valuable credentials to an attacker in specific scenarios where administrator accounts are compromised.

Based on public CVE data (MITRE/NVD).