Not rated
CVE-2023-5672 The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to…
Description
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Mail Log 1.1 | earliest → < 1.1.3 | 1.1.3 |
Other CVEs of WP Mail Log
The 5 CVEs of WP Mail Log →
CVE-2023-5644
The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with…
7.6
High
CVE-2023-5645
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL…
Not rated
CVE-2023-5673
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to…
Not rated
CVE-2023-5674
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL…
Not rated