WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
published December 26, 2023
CVSS
—
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP files, leading to remote code execution.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01096 · 65.3th percentile
Published
2023-12-26T18:33Z
EPSS history
Timeline
26 DEC 18:33Z
WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE