cleantalk
Vulnerabilities and Security Researches

Place Order Without Payment for WooCommerce, CVE-2023-33999

CVE, Research URL

CVE-2023-33999

Published on
Jun 11, 2026
Research Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.
Affected versions
max 2.5.2.
Status
vulnerable