module
WordPress Easy WP SMTP Password Reset
| Disclosed |
|---|
| Dec 6, 2020 |
Disclosed
Dec 6, 2020
Description
Wordpress plugin Easy WP SMTP versions This potentially allows for directory listings. If debug mode is also enabled for the plugin, all SMTP
commands are stored in a debug file. An email must have been sent from the system as well to create the debug
file. If an email hasn't been sent (Test Email function not included), Aggressive can bypass the last check.
Combining these items, it's possible to request a password reset for an account, then view the debug file to determine
the link that was emailed out, and reset the user's password.
commands are stored in a debug file. An email must have been sent from the system as well to create the debug
file. If an email hasn't been sent (Test Email function not included), Aggressive can bypass the last check.
Combining these items, it's possible to request a password reset for an account, then view the debug file to determine
the link that was emailed out, and reset the user's password.
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.