Product by WPVibes

    WP Mail Log

    9 known vulnerabilities in WP Mail Log (WPVibes), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WP Mail Log (WPVibes)
    HighCVE-2023-5674

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint

    		8.8
    HighCVE-2023-5673

    WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE

    		8.8
    CriticalCVE-2023-51410

    WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

    		9.9
    HighCVE-2023-5645

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint

    		8.8
    MediumCVE-2023-5672

    WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

    		6.5
    HighCVE-2023-33999

    WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2023-5644

    WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints

    		7.6
    HighCVE-2023-3088

    WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email

    		7.2
    HighCVE-2022-45807

    WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

    		5.4

    All products by WPVibes