Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-02
Debug Log Manager - Security Vulnerability (CVE-2026-120114)
The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message (and pageUrl)' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires that the site administrator has debug logging enabled with JS error logging active, and that the attacker can obtain the publicly emitted…
PLUGIN
Debug Log Manager
CVE-2026-120114
Risk Score
Threat Entry
Updated 2026-07-23
Debug Log Manager - Security Vulnerability (CVE-2026-9016)
The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, 2.5.0. This is due to the `log_js_errors()` AJAX handler being registered for unauthenticated users via `wp_ajax_nopriv_log_js_errors` and gated only by a nonce that is publicly disclosed in every front-end page's HTML through `wp_localize_script()` whenever JavaScript error logging is enabled, providing no real authorization barrier. This makes it possible for unauthenticated attackers to inject arbitrary forged entries into the site's WordPress debug log…
PLUGIN
Debug Log Manager
CVE-2026-9016
Risk Score
Threat Entry
Updated 2026-06-17
Debug Log Manager - Cross-Site Scripting (XSS) (CVE-2025-3809)
The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2025-32613 is a duplicate of this CVE.
PLUGIN
Debug Log Manager
CVE-2025-3809
Risk Score
Threat Entry
Updated 2026-06-17
Debug Log Manager - Cross-Site Scripting (XSS) (CVE-2025-32613)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bowo Debug Log Manager debug-log-manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through
PLUGIN
Debug Log Manager
CVE-2025-32613
Risk Score
Threat Entry
Updated 2026-06-17
Debug Log Manager - Broken Access Control (CVE-2024-35669)
Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.
PLUGIN
Debug Log Manager
CVE-2024-35669
Risk Score
Threat Entry
Updated 2026-06-17
Debug Log Manager - Security Vulnerability (CVE-2023-6383)
The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data
PLUGIN
Debug Log Manager
CVE-2023-6383
Risk Score
Threat Entry
Updated 2026-06-17
Debug Log Manager - Information Disclosure (CVE-2023-6136)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.0.
PLUGIN
Debug Log Manager
CVE-2023-6136
Risk Score
Threat Entry
Updated 2026-06-17
Debug Log Manager - Cross-Site Request Forgery (CSRF) (CVE-2023-5772)
The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the clear_log() function. This makes it possible for unauthenticated attackers to clear the debug log via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Debug Log Manager
CVE-2023-5772
Risk Score