TI-2024-00799 CVE-2024-0866 · GHSA-85hw-p3wr-87q9Check & Log Email <= 1.0.9 - Unauthenticated Hook InjectionPriority LOW 38The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 1.0.9 via the check_nonce function.CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00726 · Published 2024-03-26 · No fix listed CWE-94