title: Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection
description: The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
problem types: CWE-502 Deserialization of Untrusted Data
affected:
{
vendor: Unknown
product: Easy WP SMTP
versions:
version: 1.5.0, status: affected, lessThan: 1.5.0, versionType: custom
}