Lucene search
PRIOn knowledge basePRION:CVE-2023-5672HistoryDec 26, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-12-2619:15:00
PRIOn knowledge base
www.prio-n.com
4
wp mail log
plugin
file path
validation
vulnerability
local file inclusion
attacker
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_mail_log | lt | 1.1.3 |
Related
cve
cve
CVE-2023-5672
2023-12-26 19:15:07
wpvulndb
wpvulndb
WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
2023-11-28 00:00:00
nvd
nvd
CVE-2023-5672
2023-12-26 19:15:07
cvelist
cvelist
wpexploit
wpexploit
WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
2023-11-28 00:00:00