Check Log Email (Unknown) - vulnerabilities (CVEs)
5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-31. Vendor: Unknown.
CVEs of Check Log Email
- CVE-2026-14554 - CVSS 6.5 (medium), 2026-07-31: The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with…
- CVE-2026-5306 - CVSS 5.4 (medium), 2026-04-28: The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS…
- CVE-2022-1547 - CVSS 6.1 (medium), 2022-05-23: The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page,…
- CVE-2021-24908 - CVSS 6.1 (medium), 2021-11-29: The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected…
- CVE-2021-24774 - CVSS 7.2 (high), 2021-10-25: The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement…