WordPress Plugin Vulnerabilities

WP Gmail SMTP <= 1.0.7 - Sensitive Information Exposure

Description

The WP Gmail SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

Affects Plugins

Plugin icon
wp-gmail-smtp
No known fix

References

CVE
CVE-2025-53232
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a79b37b0-e5b1-4018-a0ef-97aa22f37599

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Legion Hunter
Verified
No
WPVDB ID
0d03c263-5604-4faf-ae5f-94b39fcb97eb

Timeline

Publicly Published
2025-10-10 (about 10 months ago)
Added
2025-10-15 (about 10 months ago)
Last Updated
2025-10-15 (about 10 months ago)

Other

Published
Title
Published
2025-04-04
Title
m1.DownloadList <= 0.24 - Contributor+ Sensitive Information Disclosure
Published
2024-12-10
Title
Restrict – membership, site, content and user access restrictions for WordPress < 2.2.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Published
2025-10-15
Title
ShopMagic < 4.5.7 - Unauthenticated Information Exposure
Published
2026-01-08
Title
NextGEN Download Gallery <= 1.6.2 - Unauthenticated Information Exposure
Published
2025-09-26
Title
FoodBook < 4.7.7 - Unauthenticated Sensitive Information Exposure