CVE-2023-51410

Summary

CVE-2023-51410 is a newly disclosed vulnerability that affects the WP Mail Log plugin, specifically versions from n/a to 1.1.2. This issue allows for an unrestricted file upload, enabling attackers to upload dangerous file types that could lead to serious security implications for WordPress sites using this plugin. Attackers can potentially gain unauthorized access to sensitive data or even take control of the affected WordPress website. It is strongly recommended that users update to the latest version of WP Mail Log to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.