Логотип exploitDog
bind:CVE-2022-2370
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-2370

Количество 2

Количество 2

nvd логотип

CVE-2022-2370

больше 3 лет назад

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-7vqg-r6cw-6w76

больше 3 лет назад

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-2370

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them

CVSS3: 6.5
1%
Низкий
больше 3 лет назад
github логотип
GHSA-7vqg-r6cw-6w76

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them

CVSS3: 6.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу