VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 26, 2023· Updated Nov 21, 2024

WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

CVE-2023-5672

Description

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • WordPress/WP Mail Log WordPress plugindescription
  • Wpvibes/Wp Mail Logllm-fuzzy
    Range: <1.1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.