GCVE - cpe:2.3:a:bowo:debug_log_manager:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bowo:debug_log_manager:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Bowo (`2a6397a7-b38e-550e-a34f-cdb04c9be305`)
Product	Debug Log Manager (`17214ab5-a845-5b39-9df0-5aed6e15bc3b`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/qriouslad/debug-log-manager`	purl2cpe	2026-06-01 10:13:19.235253

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-35669`	vulnerable	2026-06-08 06:39:42.295815	WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1. Published: 2024-06-09T11:55:09.155Z Updated: 2026-04-28T16:09:52.587Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/debug-log-manager/wordpress-debug-log-manager-plugin-2-3-1-broken-access-control-vulnerability-2?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6383`	vulnerable	2026-06-08 06:19:47.087935	Debug Log Manager < 2.3.0 - Sensitive Logs Exposure The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data Published: 2024-01-08T19:00:34.142Z Updated: 2025-04-17T18:07:00.271Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/eae63103-3de6-4100-8f48-2bcf9a5c91fb	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6136`	vulnerable	2026-06-08 06:19:46.320290	WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure MEDIUM (5.3) Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.0. Published: 2023-11-30T14:14:32.153Z Updated: 2026-04-28T16:09:07.724Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/debug-log-manager/wordpress-debug-log-manager-plugin-2-2-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5772`	vulnerable	2026-06-08 06:19:44.704602	Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery MEDIUM (4.3) The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the clear_log() function. This makes it possible for unauthenticated attackers to clear the debug log via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2023-11-30T03:32:49.964Z Updated: 2026-04-08T17:03:06.220Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/7e539549-1125-4b0e-aa3c-c8844041c23a?source=cve https://plugins.trac.wordpress.org/browser/debug-log-manager/tags/2.2.0/classes/class-debug-log.php#L822 https://plugins.trac.wordpress.org/browser/debug-log-manager/tags/2.2.2/classes/class-debug-log.php#L828 https://research.cleantalk.org/cve-2023-5772-debug-log-manager-csrf-to-clear-error-logs-poc/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.