The WordPress Easy WP SMTP Plugin installed on the remote host is affected by multiple vulnerabilities as follows:

- A Path Traversal Vulnerability (CVE-2022-45833).

- A Remote Code Execution vulnerability in the auth component (CVE-2022-42699).

- A Path Traversal Vulnerability (CVE-2022-45829).

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPressEasy WP SMTP Plugin installed on the remote host is affected by a Sensitive Information Disclosure.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPress Easy WP SMTP Plugin installed on the remote host is affected by an Insecure Deserialization.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The Easy WP SMTP Plugin for WordPress running on the remote web server is < 1.4.4. It is, therefore, affected by an unauthenticated information disclosure vulnerability.

The WordPress Easy WP SMTP Plugin installed on the remote host is affected by a debug log file disclosure that could allow an unauthenticated user to reset the admin password.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5837 advisory.

  - In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel     produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple     destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and     thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page     that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses. (CVE-2019-10638)

  - The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel     address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel     image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and     ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash     collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This     key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via     enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the     attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled     IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic     is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the     attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP     addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to     have a dependency on an address associated with a network namespace. (CVE-2019-10639)

  - A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through     5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering     crypto_report_alg() failures, aka CID-ffdde5932042. (CVE-2019-19062)

  - A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an     attacker with a local account to crash a trivial program and exfiltrate private kernel data.
    (CVE-2020-10732)

  - ** DISPUTED ** A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux     kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering     of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this     because unittest.c can only be reached during boot. (CVE-2019-19049)

  - An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and     netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.
    (CVE-2019-20811)

  - The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11     allows local users to cause a denial of service (improper error handling and system crash) or possibly     have unspecified other impact via a crafted USB device. (CVE-2017-16644)

  - In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device     in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042. (CVE-2019-19535)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The WordPress Easy WP SMTP Plugin installed on the remote host is affected by an object injection vulnerability due to a failure to properly sanitize user-supplied input to the 'swpsmtp_import_settings_file' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to escalate privileges and execute arbitrary code on the affected host.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The Easy WP SMTP Plugin for WordPress running on the remote web server is version 1.3.9. It is, therefore, affected by an unauthenticated remote code execution vulnerability.

The WordPress application running on the remote host has plugins installed.

ID	Name	Product	Family	Published	Updated	Severity
114014	Easy WP SMTP Plugin for WordPress < 1.5.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	9/13/2023	9/20/2023	high
113487	Easy WP SMTP Plugin for WordPress < 1.4.4 Sensitive Information Disclosure	Web App Scanning	Component Vulnerability	12/27/2022	3/14/2023	high
113486	Easy WP SMTP Plugin for WordPress < 1.5.0 Insecure Deserialization	Web App Scanning	Component Vulnerability	12/27/2022	3/14/2023	high
151189	Easy WP SMTP Plugin for WordPress < 1.4.4 Sensitive Information Disclosure	Nessus	CGI abuses	6/30/2021	10/16/2023	high
112672	Easy WP SMTP Plugin for WordPress < 1.4.3 Debug Log Disclosure	Web App Scanning	Component Vulnerability	12/18/2020	3/14/2023	high
140208	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5837)	Nessus	Oracle Linux Local Security Checks	9/4/2020	5/12/2022	high
98529	Easy WP SMTP Plugin for WordPress 1.3.9 Remote Code Execution	Web App Scanning	Component Vulnerability	4/8/2019	3/14/2023	critical
123004	Easy WP SMTP Plugin for WordPress 1.3.9 Unauthenticated Remote Code Execution	Nessus	CGI abuses	3/22/2019	3/22/2019	critical
101842	WordPress Plugin Detection	Nessus	CGI abuses	7/20/2017	11/29/2023	info

Detections

Analytics

Plugins Search

high

high

high

high

high

high

critical

critical

info