CVE-2021-24761 | BDVDB-2026-168979 Detail

Error Log Viewer by BestWebSoft

Description#

The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://wpscan.com/vulnerability/c14e1ba6-fc00-4150-b541-0d6740fee4d2

Exploit#

No public exploit known

History#

Version 12022-02-01Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.