Filter
Software
Wpvibes Wp Mail LogWordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
9.9
First published (updated )
Wpvibes Wp Mail LogWordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Wpvibes Wp Mail LogWP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
8.8
EPSS
0.11%
First published (updated )
Wpvibes Wp Mail LogWP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
8.8
EPSS
0.05%
First published (updated )
Wpvibes Wp Mail LogWP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint
8.8
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wpvibes Redirect 404 Error Page To Homepage Or Custom Page With LogsWordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection
7.6
First published (updated )
CVE-2023-5644WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints
7.6
EPSS
0.05%
First published (updated )
Wpvibes Wp Mail LogWP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
6.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wpvibes Elementor Addon Elements WordpressElementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
6.4
First published (updated )
Wpvibes Elementor Addon Elements WordpressElementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
6.4
EPSS
0.07%
First published (updated )
Wpvibes Elementor Addon Elements WordpressElementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget
5.4
First published (updated )
Wpvibes Form VibesForm Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions
5.4
First published (updated )
Wpvibes Anywhere ElementorAnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.