CVE-2021-24966

Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File Clearing

State: Published
Severity: Not scored
Published: Mar 14, 2022
Updated: Aug 3, 2024
Reserved: Jan 14, 2021

Description

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder

Scores

The record has no CVSS score.

Weaknesses

CWE-73 External Control of File Name or Path

Affected Products

Product	Versions
Error Log Viewer by BestWebSoftUnknown	1.1.1 through 1.1.1Affected

References

https://wpscan.com/vulnerability/166a4f88-4f0c-4bf4-b624-5e6a02e21fa0

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.