Approved changes feed: RSS · Atom

cpe:2.3:a:wpguruin:error_log_viewer_by_wp_guru:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpguruin (ddda7bfb-a496-59e3-afb8-5151ca8f4a88)
ProductError Log Viewer By Wp Guru (598d45ba-527c-5d1e-8df0-91bb4a9f7536)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12849 vulnerable 2026-06-08 06:25:36.203553 Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
HIGH (7.5)
The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2025-01-07T05:23:53.756Z
Updated: 2026-04-08T16:54:24.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.