CVE-2020-35234 Information

Description

The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory then they can discover a log file (such as _debug_log.txt) that contains all password-reset links. The attacker can request a reset of the Administrator password and then use a link found there.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Reference

https://wordpress.org/plugins/easy-wp-smtp/#developers https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

7.5