Skip to content
Sign in
7.2 High

CVE-2023-3081 The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions…

Description

The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: An incomplete fix was released in 1.11.1.

Affected products and versions

Product Affected versions Fixed in
WP Mail Logging 1.11 earliest → 1.11.1 No fix stated

Other CVEs of WP Mail Logging

The 3 CVEs of WP Mail Logging →
CVE-2026-109401 The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… 2.7 Low CVE-2026-2471 The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,… 7.5 High
Track this CVE