Monitor free

Report

New Known

Exploited

Fixed

WordPress Easy WP SMTP plugin <= 1.3.9 - Unauthenticated arbitrary "wp_options" import vulnerability

CVSS 3.1 score Unknown severity

Report

Monitoring Monitoring Known to be exploited Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Easy WP SMTP

Type

Plugin

Vulnerable versions

<= 1.3.9

Fixed in

1.3.9.1

PSID

196c9079efbc

CVE ID

N/A

Classification

Bypass Vulnerability

OWASP Top 10

A2: Broken Authentication and Session Management

Required privilege

Credits

Jerome Bruandet

Publicly disclosed

2019-03-20

Patchstack vPatch available since

09.12.2021

Details

Unauthenticated arbitrary "wp_options" import vulnerability found Jerome Bruandet in WordPress Easy WP SMTP plugin (versions <= 1.3.9).

Solution

Update the WordPress Easy WP SMTP plugin to the latest available version (at least 1.3.9.1).

References