CVE-2022-1412

CVE-2022-1412 describes a critical vulnerability in the Log WP_Mail WordPress plugin (versions up to 0.1) that allows for the exposure of sensitive information. The plugin saves sent emails in a publicly accessible directory with predictable filenames, enabling any unauthenticated visitor to retrieve data such as generated passwords. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity, potentially leading to a complete compromise of confidentiality. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential for unauthorized data access remains a serious concern.