CVE-2023-5672 WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
A contributor can exploit a path traversal flaw in the WP Mail Log plugin to read arbitrary files from the server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5672?
CVE-2023-5672 is a medium-severity path traversal vulnerability in Unknown WP Mail Log, published on 26 Dec 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an attacker to leak the contents of arbitrary files.
Weakness: CWE-22
Which versions are affected by CVE-2023-5672?
It affects 1 product.
Products include Wpvibes Wp Mail Log.
How do I fix CVE-2023-5672?
No fix has been published for CVE-2023-5672 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-5672 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-5672 exists.
Other vulnerabilities in Unknown WP Mail Log
- CVE-2023-51410 WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
- CVE-2023-5645 WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint
- CVE-2023-5673 WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
- CVE-2023-5674 WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
- CVE-2023-5644 WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints
Sources
Also known as GHSA-pq3w-qg2x-wx83.