CVE-2026-14554
Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.
| Vendor | unknown |
| Product | check & log email |
| Published | Jul 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown check & log email
Be the first to know when new unknown vulnerabilities affecting unknown check & log email are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Check & Log Email
0 < 2.0.15
References
Credits
Meher Sudhakar Abbireddi WPScan