Skip to content
Sign in
Not rated

CVE-2021-24758 The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order"…

Description

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections

Affected products and versions

Product Affected versions Fixed in
Email Log 2.4 earliest → < 2.4.7 2.4.7

Other CVEs of Email Log

The 2 CVEs of Email Log →
CVE-2021-24924 The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in… Not rated
Track this CVE