CVE-2022-1412

Log WP_Mail <= 0.1 - Email Logs Publicly Accessible

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

The Log WP_Mail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01451 · 73.2th percentile
Published
2022-06-13T12:41Z
EPSS history
Timeline
  • 13 JUN 12:41Z
    Log WP_Mail <= 0.1 - Email Logs Publicly Accessible
    cvelistv5