WP Logger
WP Logger has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for WP Logger has a vendor fix available, so running the current release closes it.
All of these findings were reported by Kévin Mosbahi (Mika). WP Logger is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-39456WP Logger <= 2.2 - Missing Authorization
Read the full analysisVulnerability Records
WP Logger
Author
iTRON
Insert the hook do_action( 'logger', $data ); in your code Go to Tools > WP Logger Additional buttons Use the wpdl_add_button( string $name, callable $clb, string $btnClass = '' ) function to add a button to the logger page. $name text for the button; $clb callback function; $btnClass class for the button (optional). Click on the button to execute the function via WP-AJAX. If an Exception or Error occurs, it will be logged as well. Hooks: wp_logger_button_panel wp_logger_inline_css wp_logger_inline_js wp_data_logger_print_data Available constants: WPDL_DISPLAY_LIMIT GitHub
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C