Easy WP SMTP Plugin for WordPress < 1.4.4 Sensitive Information Disclosure

high Nessus Plugin ID 151189

Language:

Synopsis

The remote web server is running a PHP application that is affected by an information disclosure vulnerability.

Description

The Easy WP SMTP Plugin for WordPress running on the remote web server is < 1.4.4. It is, therefore, affected by an unauthenticated information disclosure vulnerability.

Solution

Upgrade the Easy WP SMTP Plugin for WordPress to version 1.4.4 or later.

Plugin Details

Severity: High

ID: 151189

File Name: wordpress_plugin_easy_wp_smtp_exposure.nbin

Version: 1.61

Type: remote

Family: CGI abuses

Published: 6/30/2021

Updated: 11/12/2024

Supported Sensors: Nessus

Enable CGI Scanning: true

Risk Information

CVSS Score Rationale: Score based on in depth analysis of the vendor advisory by tenable.

CVSS v2

Risk Factor: High

Base Score: 8.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:N

CVSS Score Source: manual

CVSS v3

Risk Factor: High

Base Score: 7.4

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vulnerability Information

CPE: cpe:/a:wordpress:wordpress

Required KB Items: installed_sw/WordPress, www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploited by Nessus: true

Patch Publication Date: 12/13/2020

Vulnerability Publication Date: 12/7/2020

Detections

Analytics