CVE-2025-2840

MEDIUM

DAP to Autoresponders Email Syncing <1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.

References (3)

Core 3

Scores

CVSS v3 5.3
EPSS 0.0033
EPSS Percentile 24.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
bhuvnesh/DAP to Autoresponders Email Syncing < 1.0
Published Mar 29, 2025
Tracked Since Feb 18, 2026