CVE-2023-5672

Summary

CVE-2023-5672 is a vulnerability affecting the WP Mail Log WordPress plugin before version 1.1.3. This issue stems from insufficient validation of file path parameters during email attachment processing. An attacker can exploit this flaw to perform local file inclusion and leak the contents of arbitrary files, potentially leading to significant data exposure. Users are advised to update to the latest plugin version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.