Plugin contains vulnerable version of Guzzle (7.4.0)

  • Resolved chegor

    (@chegor)


    5 months, 1 week ago

    Security scanner found that wp-mail-smtp contains old (7.4.0) version of Guzzle in folder /vendor_prefixed/guzzlehttp/guzzle/src/

Viewing 1 replies (of 1 total)
  • Plugin Support Dake

    (@dakeg)

    Hey @chegor

    Thank you for reaching out.

    I confirmed with our developers that the latest version of WP Mail SMTP (version 4.0.2) is using version 7.8.1 of Guzzle as shown here (https://plugins.trac.www.ads-software.com/browser/wp-mail-smtp/trunk/vendor/composer/installed.php#L87).

    At the time of the scan were you using the latest version of WP Mail SMTP? If not, please perform an update and try performing the scan once more. If the same result occurs, please rest assured that it as a false-positive as WP Mail SMTP is not using version 7.4.0 of Guzzle.

    If you have any questions or feedback, please feel free to let me know.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.