CVE-2022-2370: 
WordPress vulnerability analysis and mitigation

CVE-2022-2370 affects the YaySMTP WordPress plugin versions before 2.2.1. The vulnerability was discovered and publicly disclosed on July 11, 2022. This security issue impacts WordPress installations using the YaySMTP plugin for email functionality (WPScan).

The vulnerability stems from a missing capability check in the plugin's code before displaying Mailer Credentials in JavaScript code for the settings. The issue has been assigned CWE-862 (Missing Authorization) and received a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (NVD).

The vulnerability allows any authenticated users, including those with low-privilege roles such as subscribers, to retrieve SMTP mailer credentials from the WordPress admin area. This exposure of sensitive credentials could lead to unauthorized access to email services configured through the plugin (WPScan).

The vulnerability can be exploited by accessing the wp-admin area with a Subscriber+ user account and monitoring the traffic for 'var yaySmtpWpData =' in the HTTP Response, which contains the leaked credentials. The exploit requires only basic authentication and network monitoring capabilities (WPScan).

The vulnerability has been fixed in YaySMTP version 2.2.1. Users are advised to update to this version or later to prevent unauthorized access to SMTP credentials (WPScan).