← CVE Intelligence

CVE-2023-5673

WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE PUBLISHED

Description (CNA)

The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP files, leading to remote code execution.

Affected (CNA)

Vendor / productVersions
Unknown / WP Mail Logaffected 0 before 1.1.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.