Critical 9.9
2024-12-27< 1.1.3
WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
Minimum safe version
1.1.3
Update to 1.1.3 or later to address 12 fixable vulnerabilities
WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
CVE-2023-5674
CVE-2023-5673
CVE-2023-5672
CVE-2023-5645
CVE-2023-5644
WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to SQL Injection
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id
WordPress WP Mail Log Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-3088
CVE-2022-45807
WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)