Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more Security & Risk Analysis

The easy-wp-smtp plugin version 2.13.1 presents a mixed security posture. While it demonstrates good practices in areas like output escaping (98% properly escaped) and a high percentage of SQL queries using prepared statements (62%), there are significant concerns. The presence of 3 AJAX handlers without any authentication checks exposes a direct attack surface that could be exploited by unauthenticated users. Furthermore, the plugin has a history of 8 known CVEs, including one critical and three high-severity vulnerabilities, even though none are currently unpatched. This past indicates recurring security weaknesses in areas such as password storage, path traversal, code injection, deserialization, information disclosure, missing authorization, and cross-site scripting. The single unsanitized path flow in the taint analysis, though not critical or high severity, adds to the existing concerns regarding input sanitization.

Despite the lack of currently unpatched critical or high vulnerabilities and the generally good output escaping, the unprotected AJAX endpoints and the historical pattern of severe vulnerabilities warrant caution. The plugin's attack surface, while not excessively large, has a notable unprotected component. The vulnerability history suggests a tendency for security flaws to emerge, even if they are patched promptly. Users should be aware that while this version might not have immediate critical threats, the underlying code may have recurring issues that require diligent patching and monitoring. The overall assessment suggests a moderately risky plugin, with the primary immediate risk stemming from the unprotected AJAX handlers, and the historical data indicating a higher likelihood of future vulnerabilities.