Error Log Viewer by BestWebSoft, CVE-2021-24761

CVE, Research URL: CVE-2021-24761
Home page URL: Security reports for Error Log Viewer by BestWebSoft
Application: Error Log Viewer by BestWebSoft
Published on: Feb 01, 2022
Research Description: The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.
Affected versions: max 1.1.2.
Status: vulnerable