CVE-2025-2840: DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure
First published: Sat Mar 29 2025(Updated: )
The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WordPress DAP to Autoresponders Email Syncing | <=1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2840?
CVE-2025-2840 is classified as a moderate severity vulnerability due to its risk of exposing sensitive information.
How do I fix CVE-2025-2840?
To mitigate CVE-2025-2840, update the DAP to Autoresponders Email Syncing plugin to version 1.1 or higher.
What does CVE-2025-2840 exploit?
CVE-2025-2840 exploits a vulnerability in the phpinfo.php script allowing unauthenticated access to sensitive information.
Who is affected by CVE-2025-2840?
CVE-2025-2840 affects all versions of the DAP to Autoresponders Email Syncing plugin up to and including version 1.0.
What can attackers do with CVE-2025-2840?
Attackers can potentially view sensitive information on the server via the exposed phpinfo.php script due to CVE-2025-2840.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/type
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/wordpress
- canonical/wordpress dap to autoresponders email syncing