Skip to content
Sign in
Not rated

CVE-2021-24761 The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not…

Description

The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.

Affected products and versions

Product Affected versions Fixed in
Error Log Viewer by BestWebSoft 1.1 earliest → < 1.1.2 1.1.2

Other CVEs of Error Log Viewer by BestWebSoft

The 3 CVEs of Error Log Viewer by BestWebSoft →
CVE-2023-6821 The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing… 6.5 Medium CVE-2021-24966 The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high… Not rated
Track this CVE