Lucene search
HistoryDec 28, 2023 - 7:15 p.m.
CVE-2023-50844
sql injection
james ward mail logging
wp mail catcher
cve-2023-50844
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3.
Affected configurations
Node
jameswardwp_mail_catcherRange≤2.1.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jamesward | wp_mail_catcher | * | cpe:2.3:a:jamesward:wp_mail_catcher:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
Mail logging - WP Mail Catcher < 2.1.4 - Admin+ SQLi
2023-12-29 00:00:00
prion
prion
Sql injection
2023-12-28 19:15:00
cve
cve
CVE-2023-50844
2023-12-28 19:15:15
cvelist
cvelist
wordfence
wordfence
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2023-50844