Wpvibes Wp_mail_log
8 CVEs affecting Wpvibes Wp_mail_log. Latest disclosed: 2023-12-29. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-51410 | Critical | 9.9 | 2023-12-29 | Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2. |
CVE-2023-5674 | High | 8.8 | 2023-12-26 | The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection… |
CVE-2023-5673 | High | 8.8 | 2023-12-26 | The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP… |
CVE-2023-5645 | High | 8.8 | 2023-12-26 | The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection… |
CVE-2023-5644 | High | 7.6 | 2023-12-26 | The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete… |
CVE-2023-3088 | High | 7.2 | 2023-07-12 | The WP Mail Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.1.1 due to insufficien… |
CVE-2023-5672 | Medium | 6.5 | 2023-12-26 | The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion… |
CVE-2022-45807 | Medium | 5.4 | 2023-02-02 | Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions. |