CVE-2024-3073

< 2.3.1

The Easy WP SMTP by SendLayer - WordPress SMTP and Email Log Plugin for WordPress is vulnerable to information exposure in

2.7LOW

CVE-2024-35676

< 1.8

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpecommerce Recurring

6.5MEDIUM

CVE-2024-1516

<= 3.15.1

The WP eCommerce plugin for WordPress is vulnerable to unauthorized arbitrary post creation due to a missing capability check on t

5.3MEDIUM

CVE-2024-1514

<= 3.15.1

The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all ver

9.8CRITICAL

CVE-2019-25141

<= 1.3.9

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due t

9.8CRITICAL

CVE-2022-42699

<= 1.5.1

Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.

9.1CRITICAL

CVE-2022-45833

<= 1.5.1

Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.

6.8MEDIUM

CVE-2022-45829

<= 1.5.1

Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress.

8.7HIGH

CVE-2022-3334

< 1.5.0

The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object inject

7.2HIGH

CVE-2020-35234

< 1.4.4

The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 202

7.5HIGH

CVE-2017-17780

all versions

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to

6.1MEDIUM

CVE-2017-7723

<= 1.2.4

XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.

6.1MEDIUM

CVE-2012-5310

<= 3.8.7.5

SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary

CVE-2011-5104

<= 3.8.7.1

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier