PatchTheCVEwp mail log vulnerabilities and fixes
Recent CVEs affecting wp mail log, with upgrade or downgrade steps. 6 tracked.
Also searched as: wpmaillog.
wp mail log has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2023-12-29. Highest priority: CVE-2023-5674 (score 60/100).
- CVE-2023-5674 HIGH 8.8 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using i
- CVE-2023-5673 HIGH 8.8 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to at
- CVE-2023-5672 MEDIUM 6.5 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching f
- CVE-2023-5645 HIGH 8.8 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using i
- CVE-2023-5644 HIGH 7.6 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing us
- CVE-2023-51410 CRITICAL 9.9 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mai
FAQ
How do I fix wp mail log vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp mail log being exploited right now?
None of the tracked wp mail log CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp mail log CVE should I patch first?
CVE-2023-5674 currently ranks highest (60/100): The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using i.