PT-2026-7609 · WordPress · Wordpress Server Log Viewer

Strider · Publicado 2026-02-11 · Atualizado 2026-02-11 · CVE-2019-25315

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WordPress Server Log Viewer version 1.0

Description The software contains a persistent cross-site scripting issue that allows attackers to inject malicious scripts through unfiltered log file paths. Attackers can add log files containing XSS payloads that will execute when viewed within the WordPress admin interface. The vulnerability allows for the injection of scripts through the logfile parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-25315

Produtos afetados

Wordpress Server Log Viewer

Referências · 6

• 🔥 https://exploit-db.com/exploits/47419 · Exploit
• https://github.com/anttiviljami/wp-server-log-viewer · Nota
• https://osv.dev/vulnerability/CVE-2019-25315 · Aviso do Fabricante
• https://vulncheck.com/advisories/wp-server-log-viewer-logfile-persistent-cross-site-scripting · Nota
• https://t.me/CVEtracker/44428 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-25315 · Nota de Segurança