Read the docs

Email Log Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Email Log Project records in CISA KEV

No Email Log Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Log 2 records MEDIUM

Records

2 records

TI-2021-07040 CVE-2021-24758 · GHSA-3545-2cxj-jfvg

Email Log < 2.4.7 - Admin+ SQL Injection

Priority MEDIUM 41

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01334 Published 2021-11-17 Fixed in 2.4.7 CWE-89
TI-2021-07204 CVE-2021-24924 · GHSA-v77r-m6p5-82m8

Email Log < 2.4.8 - Reflected Cross-Site Scripting

Priority LOW 29

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-12-06 Fixed in 2.4.8 CWE-79
Open these records in search →