Vulnerabilities and Security Researches

YaySMTP – Simple WP SMTP Mail, CVE-2022-2369

CVE, Research URL: CVE-2022-2369
Home page URL: Security reports for YaySMTP – Simple WP SMTP Mail
Application: YaySMTP – Simple WP SMTP Mail
Published on: Aug 01, 2022
Research Description: The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users, such as subscriber to view the Logs of the plugin
Affected versions: Min -, max 2.2.1.
Status: vulnerable