5.4
Medium
CVE-2026-5306 The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow…
Description
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Check & Log Email 2.0 | earliest → < 2.0.13 | 2.0.13 |
Other CVEs of Check & Log Email
The 5 CVEs of Check & Log Email →
CVE-2026-14554
The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them…
6.5
Medium
CVE-2022-1547
The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back…
Not rated
CVE-2021-24908
The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an…
Not rated
CVE-2021-24774
The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET…
Not rated