Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24774

Check & Log Email < 1.0.3 - Admin+ SQL Injections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Check & Log Email

  • 1.0.3 to < 1.0.3affected

References