Skip to content
OpenAdvisories
Unscored CVE-2022-2369 EUVD-2022-34636GHSA-r4hj-g29h-cqwr

YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure

Published Aug 1, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users, such as subscriber to view the Logs of the plugin

Affected products

VendorProductAffectedFixed
— YaySMTP – Simple WP SMTP Mail 2.2.1 – < 2.2.1 2.2.1

References