Description
WordPress Plugin Debug Log Manager is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Debug Log Manager version 2.2.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.2.2 or latest
References
https://research.cleantalk.org/cve-2023-5772-debug-log-manager-csrf-to-clear-error-logs-poc/
https://plugins.trac.wordpress.org/browser/debug-log-manager/tags/2.2.2/README.md?rev=3003178
Related Vulnerabilities
WordPress Plugin WP Business Intelligence Lite Arbitrary File Upload (1.0.6)
MySQL CVE-2020-14893 Vulnerability (CVE-2020-14893)
Joomla! Core 1.0.x Multiple Cross-Site Scripting Vulnerabilities (1.0.0 - 1.0.10)
phpBB CVE-2008-4125 Vulnerability (CVE-2008-4125)
WordPress Plugin Import any XML or CSV File to WordPress Arbitrary File Upload (3.6.7)