Vendor

    WPecommerce, Alexanderfoxc

    10 known vulnerabilities in products by WPecommerce, Alexanderfoxc, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WPecommerce, Alexanderfoxc
    CriticalCVE-2019-25141

    Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

    also in 1 other product

    		9.8
    HighCVE-2020-35234

    WP eCommerce Easy WP SMTP: security vulnerability

    		7.5
    CriticalCVE-2022-42699

    WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)

    also in 1 other product

    		9.1
    HighCVE-2022-3334

    Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection

    		7.2
    CriticalCVE-2024-1514

    WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection

    		9.8
    HighCVE-2022-45829

    WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion

    also in 1 other product

    		8.7
    MediumCVE-2022-45833

    WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal

    also in 1 other product

    		6.8
    MediumCVE-2017-7723

    WP eCommerce Easy WP SMTP: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2024-35676

    WordPress Recurring PayPal Donations plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

    		6.5
    LowCVE-2024-3073

    Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI

    also in 1 other product

    		2.7

    Products

    Products by WPecommerce, Alexanderfoxc
    Easy WP SMTP80