CVE-2023-51410 — AI Deep Analysis Summary

Q: Who is affected? (Versions/Components)

👥 **Who is affected?** * **Vendor:** **WPVibes**. 🏢 * **Product:** **WP Mail Log**. 📦 * **Version:** Reference link mentions version **1.1.2**. 📌 * **Platform:** WordPress sites using this specific plugin. 🌐

Q: Is there a public Exp? (PoC/Wild Exploitation)

💻 **Public Exploit?** * **PoCs:** **None listed** in the data. 🚫 * **References:** A Patchstack entry exists. 🔗 * **Status:** No wild exploitation confirmed yet, but the vector is clear. 🕵️♂️

Q: Is it fixed officially? (Patch/Mitigation)

🩹 **Is it fixed?** * **Official Patch:** **Unknown** in description. ❓ * **Vendor Action:** Check **WPVibes** or **Patchstack** for updates. 🔄 * **Advice:** Assume it is **VULNERABLE** until patched. ⚠️

Q: Is it urgent? (Priority Suggestion)

⏰ **Is it urgent?** * **Priority:** **HIGH**. 🔴 * **Reason:** Low auth requirement + High impact + File upload risk. 📉 * **Action:** Patch or disable **IMMEDIATELY**. ⚡

Updated May 08, 2026 CVSS 9.9 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **What is this?**

*   **Essence:** A code flaw in the **WP Mail Log** plugin for WordPress. 📧
*   **Consequences:** High impact on Confidentiality, Integrity, and Availability.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause?**

*   **CWE ID:** **CWE-434**. 🧬
*   **Flaw:** Arbitrary upload of dangerous file types.…

Read full answer (login)

Q3Who is affected? (Versions/Components)

👥 **Who is affected?**

*   **Vendor:** **WPVibes**. 🏢
*   **Product:** **WP Mail Log**. 📦
*   **Version:** Reference link mentions version **1.1.2**. 📌
*   **Platform:** WordPress sites using this specific plugin. 🌐

Q4What can hackers do? (Privileges/Data)

💣 **What can hackers do?**

*   **Privileges:** Requires **Low Privileges** (PR:L).…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

🚧 **Exploitation Threshold?**

*   **Auth Required:** **YES**. ⚠️
*   **Complexity:** **LOW** (AC:L). 🏃‍♂️
*   **User Interaction:** **NONE** (UI:N).…

Read full answer (login)

Q6Is there a public Exp? (PoC/Wild Exploitation)

💻 **Public Exploit?**

*   **PoCs:** **None listed** in the data. 🚫
*   **References:** A Patchstack entry exists. 🔗
*   **Status:** No wild exploitation confirmed yet, but the vector is clear. 🕵️‍♂️

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check?**

*   **Scan:** Check for **WP Mail Log** plugin. 🧐
*   **Version:** Verify if version is **1.1.2** or older. 📅
*   **Files:** Monitor for unauthorized file uploads in upload directories.…

Read full answer (login)

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Is it fixed?**

*   **Official Patch:** **Unknown** in description. ❓
*   **Vendor Action:** Check **WPVibes** or **Patchstack** for updates. 🔄
*   **Advice:** Assume it is **VULNERABLE** until patched. ⚠️

Q9What if no patch? (Workaround)

🛑 **No Patch? Workaround**

*   **Disable:** Deactivate the **WP Mail Log** plugin immediately. 🚫
*   **Remove:** Uninstall the plugin if not needed.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

⏰ **Is it urgent?**

*   **Priority:** **HIGH**. 🔴
*   **Reason:** Low auth requirement + High impact + File upload risk. 📉
*   **Action:** Patch or disable **IMMEDIATELY**. ⚡

Continue exploring

Vulnerability detail Full AI analysis (login) WPVibes CWE-434