Mail Logging & Catcher (<= 2.2.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/mail-logging--catcher--2.2.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 31 Oct 2026 07:53:08 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMail logging & Catcher: Sensitive Information Exposure (CVE-2026-120040)https://feed.craftedsignal.io/briefs/2026-10-mail-logging-catcher-vuln/Sat, 31 Oct 2026 07:53:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-mail-logging-catcher-vuln/The Mail logging & Catcher plugin for WordPress (<= 2.2.0) contains an information exposure vulnerability allowing authenticated users to extract password-reset keys and escalate privileges to administrator.CVE-2026-120040 affects the Mail logging & Catcher plugin for WordPress in all versions up to and including 2.2.0. The flaw resides in the 'message' parameter, which can leak sensitive data from stored email logs. Successful exploitation allows an authenticated user with at least subscriber-level access to access administrator password-reset keys, provided the 'default_view_role' setting has been configured to grant read access to low-privileged users. This can lead to unauthorized account takeover and privilege escalation to the administrator role.

Impact

The vulnerability allows authenticated, low-privileged users to intercept administrator password-reset tokens. By successfully hijacking the password-reset flow, an attacker can gain full administrative control over the affected WordPress installation.

Recommendation

  • Update the Mail logging & Catcher plugin to the latest version once a patch is available.
  • Audit the 'default_view_role' configuration within the plugin settings to ensure that access to email logs is restricted to the 'manage_options' capability or higher, preventing access by low-privileged user roles.
  • Review WordPress audit logs for unusual password-reset activity initiated by non-administrative accounts.
]]>highadvisorywordpressvulnerabilityprivilege-escalationweb-application