Easy WP SMTP vulnerabilities
We track 1 vulnerability in Easy WP SMTP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2022.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Easy WP SMTP vulnerabilities
- 7.2 High severity
Easy WP SMTP: Deserialization of Untrusted Data
The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.