CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-35234

The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file (such as #############_debug_log.txt) that contains all password-reset links. The attacker can request a reset of the Administrator password and then use a link found there.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.725

EPSS Ranking 98.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-35234

Wp-Ecommerce » Easy Wp Smtp » Version: N/A

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:-
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.2

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.2
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.3

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.3
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.4

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.4
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.5

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.5
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.6

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.6
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.7

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.7
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.8

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.8
Wp-Ecommerce » Easy Wp Smtp » Version: 1.0.9

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.0.9
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.0

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.0
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.2

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.2
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.3

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.3
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.4

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.4
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.5

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.5
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.6

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.6
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.7

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.7
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.8

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.8
Wp-Ecommerce » Easy Wp Smtp » Version: 1.1.9

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.1.9
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.0

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.0
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.2

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.2
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.3

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.3
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.4

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.4
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.5

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.5
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.6

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.6
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.7

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.7
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.8

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.8
Wp-Ecommerce » Easy Wp Smtp » Version: 1.2.9

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.2.9
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.0

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.0
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.2

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.2
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.3

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.3
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.4

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.4
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.5

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.5
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.6

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.6
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.7

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.7
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.8

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.8
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.8.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.8.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.9

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.9
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.9.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.9.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.9.2

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.9.2
Wp-Ecommerce » Easy Wp Smtp » Version: 1.3.9.3

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.3.9.3
Wp-Ecommerce » Easy Wp Smtp » Version: 1.4.0

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.4.0
Wp-Ecommerce » Easy Wp Smtp » Version: 1.4.1

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.4.1
Wp-Ecommerce » Easy Wp Smtp » Version: 1.4.3

cpe:2.3:a:wp-ecommerce:easy_wp_smtp:1.4.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-35234

Products

Pricing

Contact Us