CVE-2022-2369 | BDVDB-2026-181321 Detail

YaySMTP – Simple WP SMTP Mail

Description#

The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users, such as subscriber to view the Logs of the plugin

Impact#

No impact statement in the source data.

Weaknesses#

CWE-862 Missing Authorization

References#

https://wpscan.com/vulnerability/9ec8d318-9d25-4868-94c6-7c16444c275d

Exploit#

No public exploit known

History#

Version 12022-08-01Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.