VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 26, 2023· Updated Aug 2, 2024

WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE

CVE-2023-5673

Description

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP files, leading to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • WordPress/WP Mail Log WordPress plugindescription
  • Wpvibes/Wp Mail Logllm-fuzzy
    Range: <1.1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.