Is my WordPress plugin safe?

Not this one?error-log-viewerError Log Viewer

• Oct 11, 2025Error Log Viewer by BestWebSoft: Directory TraversalCVE-2025-9950 · affects up to 1.1.6 · reported by WordfenceMedium 4.9

  The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwr_get_file function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

  NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org

• Mar 18, 2024Error Log Viewer by BestWebSoft: Is affected by a Directory Listing issueCVE-2023-6821 · fixed in 1.1.3 · reported by WPScanMedium 6.5

  The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization

  NVD recordwpscan.comwpscan.com

• Aug 21, 2019The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.CVE-2017-18562 · fixed in 1.0.6 · reported by MITREMedium 6.1

  The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.

  NVD recordwordpress.orgwordpress.org

Versions are matched against the affected ranges published with each record. A plugin can ship a fix under its own numbering, so if something looks off, check the linked record. Want the whole site checked at once? Run the free website check.