Lucene search
+L

3 matches found

NVD
NVD
added 2023/12/28 7:15 p.m.36 views

CVE-2023-50844

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3...

7.6CVSS0.00534EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/28 6:27 p.m.60 views

CVE-2023-50844

CVE-2023-50844 is a SQL Injection flaw in the WordPress plugin “Mail logging – WP Mail Catcher,” caused by improper neutralization of input in an SQL command. Affected versions are listed as from n/a through 2.1.3. The vulnerability has been patched; users should update to a fixed release. The ba...

7.6CVSS7.8AI score0.00534EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/21 12:0 a.m.15 views

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

Software WP Mail Catcher Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50844 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 8506292c33f5 Credits Muhammad Daffa Required privilege Administrator...

7.6CVSS6.8AI score0.00534EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder