WordPress plugin
Debug Log Manager – Conveniently Monitor and Inspect Errors security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium6
- Low0
All Debug Log Manager – Conveniently Monitor and Inspect Errors vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint ≤2.5.2Update to 2.5.3 | CVE-2026-120114 | |
| Medium5.3 | Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action ≤2.5.0Update to 2.5.1 | CVE-2026-9016 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2.3.4Update to 2.3.5 | CVE-2025-3809 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2.3.4Update to 2.3.5 | CVE-2025-32613 | |
| Medium5.4 | Missing Authorization ≤2.3.1Update to 2.3.2 | CVE-2024-35669 | |
| Medium4.3 | Missing Authorization via toggle_debugging ≤2.3.1Update to 2.3.2 | CVE-2024-33915 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2.3.1Update to 2.3.2 | CVE-2024-32582 | |
| Medium5.3 | Directory Listing to Sensitive Information Disclosure ≤2.2.2Update to 2.3.0 | CVE-2023-6383 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.2.1Update to 2.2.2 | CVE-2023-5772 | |
| Medium4.3 | Missing Authorization ≤2.2.1Update to 2.2.2 | CVE-2023-6136 |
- High7.2Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint
≤2.5.2Update to 2.5.3
- Medium5.3Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action
≤2.5.0Update to 2.5.1
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2.3.4Update to 2.3.5
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2.3.4Update to 2.3.5
- Medium5.4Missing Authorization
≤2.3.1Update to 2.3.2
- Medium4.3Missing Authorization via toggle_debugging
≤2.3.1Update to 2.3.2
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2.3.1Update to 2.3.2
- Medium5.3Directory Listing to Sensitive Information Disclosure
≤2.2.2Update to 2.3.0
- Medium4.3Cross-Site Request Forgery
≤2.2.1Update to 2.2.2
- Medium4.3Missing Authorization
≤2.2.1Update to 2.2.2
Debug Log Manager – Conveniently Monitor and Inspect Errors: common questions
Does Debug Log Manager – Conveniently Monitor and Inspect Errors have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Debug Log Manager – Conveniently Monitor and Inspect Errors: 4 high, 6 medium. None are known to affect version null.
How do I check which version of Debug Log Manager – Conveniently Monitor and Inspect Errors I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Debug Log Manager – Conveniently Monitor and Inspect Errors vulnerability?
CVE-2026-120114, published Oct 30, 2026: Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint. Severity: High (CVSS 7.2).
Is any Debug Log Manager – Conveniently Monitor and Inspect Errors vulnerability listed in CISA KEV?
No. None of the known Debug Log Manager – Conveniently Monitor and Inspect Errors vulnerabilities is currently listed in the CISA KEV catalog.