{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amail_logging__catcher_projectmail_logging__catcherwordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mail_logging_\u0026_catcher_project:mail_logging_\u0026_catcher:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-120040"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mail logging \u0026 Catcher (\u003c= 2.2.0)"],"_cs_severities":["high"],"_cs_tags":["wordpress","vulnerability","privilege-escalation","web-application"],"_cs_type":"advisory","_cs_vendors":["WordPress"],"content_html":"\u003cp\u003eCVE-2026-120040 affects the Mail logging \u0026amp; Catcher plugin for WordPress in all versions up to and including 2.2.0. The flaw resides in the 'message' parameter, which can leak sensitive data from stored email logs. Successful exploitation allows an authenticated user with at least subscriber-level access to access administrator password-reset keys, provided the 'default_view_role' setting has been configured to grant read access to low-privileged users. This can lead to unauthorized account takeover and privilege escalation to the administrator role.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows authenticated, low-privileged users to intercept administrator password-reset tokens. By successfully hijacking the password-reset flow, an attacker can gain full administrative control over the affected WordPress installation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the Mail logging \u0026amp; Catcher plugin to the latest version once a patch is available.\u003c/li\u003e\n\u003cli\u003eAudit the 'default_view_role' configuration within the plugin settings to ensure that access to email logs is restricted to the 'manage_options' capability or higher, preventing access by low-privileged user roles.\u003c/li\u003e\n\u003cli\u003eReview WordPress audit logs for unusual password-reset activity initiated by non-administrative accounts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-31T07:53:08Z","date_published":"2026-10-31T07:53:08Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mail-logging-catcher-vuln/","summary":"The Mail logging \u0026 Catcher plugin for WordPress (\u003c= 2.2.0) contains an information exposure vulnerability allowing authenticated users to extract password-reset keys and escalate privileges to administrator.","title":"Mail logging \u0026 Catcher: Sensitive Information Exposure (CVE-2026-120040)","url":"https://feed.craftedsignal.io/briefs/2026-10-mail-logging-catcher-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mail_logging_\u0026_catcher_project:mail_logging_\u0026_catcher:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}