CVE-2022-45833 - WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal

MEDIUM

WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal

Published Dec 6, 2022

6.8

MEDIUM

CVSS 3.1

EPSS 0.84%

Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
-	affected	<=1.5.1

Vendor solution

Update to 1.5.2 or higher version.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48687		Advisory
https://patchstack.com/database/vulnerability/easy-wp-smtp/wordpress-easy-wp-smtp-plugin-1-5-1-auth-arbitrary-file-read-vulnerability?_s_id=cve		vdb-entryThird Party Advisory