Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: BestWebSoft Component: Error Log Viewer Clear all filters
TI-2023-06230 CVE-2023-6821 · GHSA-79vv-2m5g-frvv

Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure

Priority LOW 30

The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00587 Published 2024-03-18 Fixed in 1.1.3 CWE-862
TI-2021-07245 CVE-2021-24966 · GHSA-6x4q-qqxj-h82w

Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File Clearing

Priority LOW 31

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folde…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.05188 Published 2022-03-14 No fix listed CWE-73
TI-2021-07043 CVE-2021-24761 · GHSA-hf7c-m9qj-7hvq

Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF

Priority LOW 30

The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00599 Published 2022-02-01 Fixed in 1.1.2 CWE-22
TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

Priority LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79