7.1
High
CVE-2023-33999 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail…
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Mail Log 1.0 | earliest → 1.0.2 | No fix stated |
Other CVEs of WP Mail Log
The 4 CVEs of WP Mail Log →
CVE-2023-51410
Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log:…
9.9
Critical
CVE-2023-3088
The WP Mail Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up…
7.2
High
CVE-2022-45807
Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions
5.4
Medium