VULNERABILITY INTELLIGENCE

CVE-2023-5672

CVSS score6.5 MEDIUM
EPSS probability0.71%
CISA KEVNot currently listed
Published2023-12-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references