PT-2026-7609 · WordPress · Wordpress Server Log Viewer

Strider · Published 2026-02-11 · Updated 2026-02-11 · CVE-2019-25315

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WordPress Server Log Viewer version 1.0

Description The software contains a persistent cross-site scripting issue that allows attackers to inject malicious scripts through unfiltered log file paths. Attackers can add log files containing XSS payloads that will execute when viewed within the WordPress admin interface. The vulnerability allows for the injection of scripts through the logfile parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25315

Affected Products

Wordpress Server Log Viewer

References · 6

• 🔥 https://exploit-db.com/exploits/47419 · Exploit
• https://osv.dev/vulnerability/CVE-2019-25315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25315 · Security Note
• https://github.com/anttiviljami/wp-server-log-viewer · Note
• https://vulncheck.com/advisories/wp-server-log-viewer-logfile-persistent-cross-site-scripting · Note
• https://t.me/CVEtracker/44428 · Telegram Post