CVE-2026-14554
CVE-2026-14554 · Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.
CVSS 6.5 · Medium · EPSS 1.4% · Public exploit · Fix available
- Published
- Updated
Affected products and versions
check & log email
- Versions
- ≥ 0, < 2.0.15: Affected (semver)
Update to 2.0.15