What’s Vulnerable › Products

WP Mail Log vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WP Mail Log version is affected

Latest WP Mail Log vulnerabilities

• CVE-2023-33999 — WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-51410 — WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload (CVSS 8.8)
• CVE-2023-5674 — WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint (CVSS 8.8)
• CVE-2023-5673 — WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE (CVSS 8.8)
• CVE-2023-5672 — WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint (CVSS 6.5)
• CVE-2023-5645 — WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint (CVSS 8.8)
• CVE-2023-5644 — WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints (CVSS 7.6)
• CVE-2023-3088 — WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email (CVSS 6.1)
• CVE-2022-45807 — WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)