WordPress Plugin Vulnerabilities

Easy WP Smtp < 1.2.5 - XSS

Description

The Easy WP SMTP WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
easy-wp-smtp
Fixed in 1.2.5

References

CVE
CVE-2017-7723

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
f3fd4fcc-b700-4a7e-9510-494a1df7501d

Timeline

Publicly Published
2017-04-14 (about 8 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-06-17
Title
WP Job Portal < 2.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2024-04-26
Title
Meks Smart Social Widget < 1.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2025-09-30
Title
CF7 Auto Responder Addon < 2.5 - Unauthenticated Stored Cross-Site Scripting
Published
2024-11-18
Title
Chameleoni Jobs < 2.5.5 - Reflected Cross-Site Scripting
Published
2026-01-08
Title
Nearby Now Reviews <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes