Is Easy WP SMTP safe?

Every recorded flaw

• Jun 13, 2024Easy WP SMTP by SendLayer – WordPress SMTP and Email Log: Information exposureCVE-2024-3073 · affects up to 2.3.0 · reported by WordfenceLow 2.7
• Jun 6, 2023Easy WP SMTP: Authorization bypassCVE-2019-25141 · affects up to 1.3.9 · reported by Wordfence4.5% oddsCritical 9.8
• Dec 6, 2022Auth.CVE-2022-42699 · affects up to 1.5.1 · reported by Patchstack1.5% oddsCritical 9.1
• Dec 6, 2022Auth.CVE-2022-45833 · affects up to 1.5.1 · reported by PatchstackMedium 6.8
• Dec 6, 2022Auth.CVE-2022-45829 · affects up to 1.5.1 · reported by PatchstackHigh 8.7
• Oct 31, 2022Easy WP SMTP: Unserialises the content of an imported fileCVE-2022-3334 · fixed in 1.5.0 · reported by WPScan1.5% oddsHigh 7.2
• Dec 13, 2020The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020.CVE-2020-35234 · fixed in 1.4.4 · reported by MITRE60% oddsHigh 7.5
• Apr 24, 2017XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.CVE-2017-7723 · fixed in 1.2.5 · reported by MITREMedium 6.1

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.