High severity7.5NVD Advisory· Published Jun 13, 2022· Updated Jun 17, 2026

CVE-2022-1412

Description

The Log WP_Mail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Premierethemes/Log Wp Mail
cpe:2.3:a:premierethemes:log_wp_mail:*:*:*:*:*:wordpress:*:*
Range: <=0.1
Log WP_Mail/WP_Maildescription
WordPress/Wp Mailllm-fuzzy
Range: <=0.1
Package: https://wordpress.org/plugins/wp-mail

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/ee10f21f-4476-4f3d-85ed-94d438c61ec2nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000