Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109401— WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email

Quick assessment

Affected
smub WP Mail Logging
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 的 WP Mail Logging 插件在所有 1.17.0 及以下版本中存在敏感信息泄露漏洞，攻击面位于 参数。该漏洞允许拥有管理员级别或更高权限的已认证攻击者，提取属于其他用户的完整邮件日志记录，内容包括收件人地址、邮件主题、完整邮件正文以及其中包含的任何 URL。这些被泄露的邮件记录，其收件人地址恰好与攻击者使用的通配符匹配。 利用该漏洞需要满足以下条件：管理员需通过 WordPress 标准的隐私工作流程，为攻击者的邮箱地址处理个人数据导出请求；同时，攻击者的邮箱地址必须包含 LIKE

CVSS 2.7 · Low EPSS 0.32% · P24

Affected Version Matrix 1

VendorProduct Version RangeStatus
smub WP Mail Logging ≤ 1.17.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109401

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email
Source: CVE Program / CVE List V5
Vulnerability Description
The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to extract complete logged mail rows belonging to other users — including recipient addresses, message subjects, full message bodies, and any URLs contained therein — whose addresses happen to match the wildcard. Exploitation requires an administrator to process a personal-data export request for the attacker's email address via the standard WordPress privacy workflow, and the attacker's address must contain a LIKE wildcard character (such as an underscore) that matches at least one other user's address in the mail log.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
smub WP Mail Logging 0 ~ 1.17.0 -

II. Public POCs for CVE-2026-109401

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109401

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-109401 (1)

Vendor Pages for CVE-2026-109401 (3)

Other References for CVE-2026-109401 (1)

IV. Related Vulnerabilities

Same product: WP Mail Logging
Same vendor: smub
Same weakness: CWE-200

V. Comments for CVE-2026-109401

No comments yet

Leave a comment