Wpchill Check \& Log Email vulnerabilities

3 vulnerabilities

Known vulnerabilities in Wpchill Check \& Log Email, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-24908unknowncheck & log email+2
EPSS score
0.78%
The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting7.2CVE-2021-24774unknowncheck & log email+2
EPSS score
1.32%
The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues6.1CVE-2022-1547unknowncheck & log email+2
EPSS score
0.80%
The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting