CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5644

The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.4%

CVSS Severity

CVSS v3 Score 7.6

References

Products affected by CVE-2023-5644

Wpvibes » Wp Mail Log » Version: N/A

cpe:2.3:a:wpvibes:wp_mail_log:-
Wpvibes » Wp Mail Log » Version: 0.3

cpe:2.3:a:wpvibes:wp_mail_log:0.3
Wpvibes » Wp Mail Log » Version: 0.4

cpe:2.3:a:wpvibes:wp_mail_log:0.4
Wpvibes » Wp Mail Log » Version: 0.5

cpe:2.3:a:wpvibes:wp_mail_log:0.5
Wpvibes » Wp Mail Log » Version: 1.0

cpe:2.3:a:wpvibes:wp_mail_log:1.0
Wpvibes » Wp Mail Log » Version: 1.0.1

cpe:2.3:a:wpvibes:wp_mail_log:1.0.1
Wpvibes » Wp Mail Log » Version: 1.0.2

cpe:2.3:a:wpvibes:wp_mail_log:1.0.2
Wpvibes » Wp Mail Log » Version: 1.1

cpe:2.3:a:wpvibes:wp_mail_log:1.1
Wpvibes » Wp Mail Log » Version: 1.1.1

cpe:2.3:a:wpvibes:wp_mail_log:1.1.1
Wpvibes » Wp Mail Log » Version: 1.1.2

cpe:2.3:a:wpvibes:wp_mail_log:1.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5644

Products

Pricing

Contact Us