7.6
Élevée
CVE-2023-5644 The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with…
Description
The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Mail Log 1.1 | premières → < 1.1.3 | 1.1.3 |
Autres CVE de WP Mail Log
Les 5 CVE de WP Mail Log →
CVE-2023-5672
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to…
Non notée
CVE-2023-5645
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL…
Non notée
CVE-2023-5673
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to…
Non notée
CVE-2023-5674
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL…
Non notée