1. Home
  2. CVE Database
  3. CVE-2023-5672
MEDIUM · 6.5

CVE-2023-5672

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the cont...

Vulnerability Description

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
WpvibesWp Mail Log< 1.1.3

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2023-5672?

CVE-2023-5672 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the cont...

How severe is CVE-2023-5672?

CVE-2023-5672 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-5672?

Check the references section above for vendor advisories and patch information. Affected products include: Wpvibes Wp Mail Log.