{"uuid": "9ad03cc4-2c28-450d-b9a9-2655de847979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35234", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_easy_wp_smtp.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Wordpress plugin Easy WP SMTP versions <= 1.4.2 was found to not include index.html within its plugin folder.\\n          This potentially allows for directory listings.  If debug mode is also enabled for the plugin, all SMTP\\n          commands are stored in a debug file.  An email must have been sent from the system as well to create the debug\\n          file.  If an email hasn't been sent (Test Email function not included), Aggressive can bypass the last check.\\n          Combining these items, it's possible to request a password reset for an account, then view the debug file to determine\\n          the link that was emailed out, and reset the user's password.\", \"disclosure_date\": \"2020-12-06\", \"fullname\": \"auxiliary/scanner/http/wp_easy_wp_smtp\", \"is_install_path\": true, \"mod_time\": \"2024-01-07 15:02:53 +0000\", \"name\": \"WordPress Easy WP SMTP Password Reset\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_easy_wp_smtp.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_easy_wp_smtp\", \"references\": [\"URL-https://wordpress.org/support/topic/security-issue-with-debug-log/\", \"URL-https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/\", \"URL-https://plugins.trac.wordpress.org/changeset/2432768/easy-wp-smtp\", \"WPVDB-10494\", \"CVE-2020-35234\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:56.960396Z"}