Wp Logs Book

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_logs_book:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Logs Book (d1c9c8cf-bbf4-54e8-8990-26345f24c990)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4477 vulnerable 2026-06-08 06:50:17.833117 WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS
The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting
Published: 2024-06-21T06:00:04.995Z
Updated: 2024-08-01T20:40:47.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4475 vulnerable 2026-06-08 06:50:17.832701 WP Logs Book <= 1.0.1 - Log Clearing via CSRF
The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers to make a logged in admin clear the logs them via a CSRF attack
Published: 2024-06-21T06:00:04.785Z
Updated: 2024-08-01T20:40:47.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4474 vulnerable 2026-06-08 06:50:17.831091 WP Logs Book <= 1.0.1 - Disable Logging via CSRF
The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-06-21T06:00:04.573Z
Updated: 2024-08-01T20:40:47.250Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.