Easy WP SMTP, a WordPress plugin, with more than 500,000 installations, allows one to configure and send all outgoing mails via a SMTP server, the major benefit of which is that the mails do not end up in the recipient’s junk/spam folder. The team managing this plugin had fixed a zero-day vulnerability affecting versions 1.4.2 (current version 1.4.4) and lower that would allow an unauthenticated user to reset the admin password which would enable the hacker to take complete control of the website.

Read full article on GBHackers