Vulnerabilities

TI-2024-23538 CVE-2024-35669 · GHSA-35cc-35p5-2c6h

WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00356 Published 2024-06-09 No fix listed CWE-862

TI-2023-05859 CVE-2023-6383 · GHSA-24x8-275w-hwpr

Debug Log Manager < 2.3.0 - Sensitive Logs Exposure

MEDIUM 40

The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00647 Published 2024-01-08 Fixed in 2.3.0 CWE-862

TI-2023-05641 CVE-2023-6136 · GHSA-m474-vhrf-3mpc

WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure

LOW 34

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0059 Published 2023-11-30 No fix listed CWE-200

TI-2023-05310 CVE-2023-5772 · GHSA-8mwm-rmq7-g8j8

Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery

LOW 20

The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00259 Published 2023-11-30 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

Debug Log Manager < 2.3.0 - Sensitive Logs Exposure

WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure

Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery