WordPress Easy WP SMTP Information Disclosure Scanner

The WordPress Easy WP SMTP plugin is a widely-used tool for configuring and sending emails via SMTP directly from a WordPress website. It is popular among web administrators who prefer using SMTP for more reliable email delivery and logging features it offers. The plugin integrates into WordPress sites seamlessly and is utilized to enhance email communication capabilities, ensuring emails are sent from a trusted source like Gmail or other SMTP servers. Furthermore, it allows easy configuration of SMTP credentials for sending transactional emails and notifications.

Information Disclosure is a vulnerability that occurs when sensitive application data, such as email contents or other stored data, is accessible to unauthorized parties. In the context of this scanner, it focuses on the exposure of the debug log file which might contain sensitive email information, including password reset links, due to improper directory listing settings. When a directory is not appropriately secured, its contents may be browsable and any stored sensitive information can be compromised.

Possible vulnerability details include exposed directory listings that indicate the presence of a debug log file related to the Easy WP SMTP plugin. The vulnerable endpoint is typically a directory where log files are stored (e.g., the logs subdirectory under the plugin's directory). Insecure directory configurations could expose these files, allowing unauthorized visitors to access potentially sensitive information stored in text format.

The exploitation of this vulnerability could lead to severe information compromise, where unauthorized actors access sensitive emails or captured SMTP exchanges. It may result in email account exploitation if password reset links are intercepted and used maliciously. Furthermore, any administrative actions dependent on email confirmation or notification could also be compromised, leading to unauthorized access or actions.

REFERENCES

• https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/
• https://nvd.nist.gov/vuln/detail/CVE-2020-35234
• https://wpscan.com/vulnerability/10494