Threats tagged 'ghsa-7xhr-q895-ggjm'

The Mail logging & Catcher plugin for WordPress versions up to and including 2.2.0 is vulnerable to sensitive information exposure via the 'message' parameter. Authenticated users with subscriber-level access or higher can extract administrator password-reset keys from stored email logs if the plugin's default_view_role setting is configured to allow low-privileged users to access logs. This vulnerability enables privilege escalation to administrator by completing the password-reset flow. By default, the plugin restricts log access to administrators only, which mitigates exploitation on untouched installs.