Noor Alam SMTP Mailer Sensitive Data Exposure Vulnerability

A vulnerability allowing the retrieval of embedded sensitive data has been identified in the Noor Alam SMTP Mailer plugin for WordPress, affecting versions through 1.1.24. This issue arises from the insertion of sensitive information into sent data, which could be accessed by unauthorized users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information that is typically restricted from regular users. Such data exposure could be leveraged to exploit other vulnerabilities within the system.

Remediation

Users of the Noor Alam SMTP Mailer plugin should update to version 1.1.25 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.