YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
CVE-2022-2369
4.3MEDIUM
What is CVE-2022-2369?
The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users, such as subscriber to view the Logs of the plugin
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
YaySMTP – Simple WP SMTP Mail 2.2.1