Unknown Check & Log Email vulnerabilities

5 vulnerabilities

Known vulnerabilities in Unknown Check & Log Email, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-24908unknowncheck & log email+2
EPSS score
0.78%
The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting7.2CVE-2021-24774unknowncheck & log email+2
EPSS score
1.32%
The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues6.1CVE-2022-1547unknowncheck & log email+2
EPSS score
0.80%
The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting6.5CVE-2026-14554unknowncheck & log email+1
EPSS score
0.40%
The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.7.2CVE-2026-5306unknowncheck & log email+1
EPSS score
0.25%
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled