Non notée
CVE-2023-5672 The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to…
Description
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Mail Log 1.1 | premières → < 1.1.3 | 1.1.3 |
Autres CVE de WP Mail Log
Les 5 CVE de WP Mail Log →
CVE-2023-5644
The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with…
7.6
Élevée
CVE-2023-5645
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL…
Non notée
CVE-2023-5673
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to…
Non notée
CVE-2023-5674
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL…
Non notée