CVE-2025-2840

Name of the Vulnerable Software and Affected Versions DAP to Autoresponders Email Syncing plugin for WordPress versions 1.0 and earlier

Description The issue allows unauthenticated attackers to view potentially sensitive information through the publicly accessible phpinfo.php script. This makes it possible for attackers to access information that could be used for further exploitation.

Recommendations For DAP to Autoresponders Email Syncing plugin for WordPress versions 1.0 and earlier, consider restricting access to the phpinfo.php script to prevent information disclosure until a patch is available.