High severity8.8NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026
CVE-2023-5674
CVE-2023-5674
Description
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Contributor.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <1.1.3
- WordPress/WP Mail Log WordPress plugindescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/32a23d0d-7ece-4870-a99d-f3f344be2d67nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.