CVE-2023-5672

WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

published December 26, 2023

CVSS
—
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00707 · 52.9th percentile
Published
2023-12-26T18:33Z
EPSS history
Timeline
  • 26 DEC 18:33Z
    WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
    cvelistv5