Medium severity6.5NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026
CVE-2023-5672
CVE-2023-5672
Description
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <1.1.3
- WordPress/WP Mail Log WordPress plugindescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/7c1dff5b-bed3-49f8-96cc-1bc9abe78749nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.