29 matches found
WordPress Check & Log Email plugin <= 1.0.5 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Check & Log Email plugin versions = 1.0.5. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.6...
WordPress plugin cross-site scripting vulnerability (CNVD-2021-102401)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the Check ...
CVE-2021-24908 Check & Log Email < 1.0.4 - Reflected Cross-Site Scripting
The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...
CVE-2021-24908
The CVE concerns the WordPress plugin Check & Log Email (before version 1.0.4). The vulnerability arises from improper escaping of the d parameter when it is echoed inside an attribute, enabling a Reflected Cross-Site Scripting (XSS) condition. Affected version range is up to 1.0.3; version 1.0.4...
CVE-2021-24908: Improper Neutralization of Input During Web Page Generation
The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...
WordPress Check & Log Email plugin <= 1.0.3 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by JrXnm in WordPress Check & Log Email plugin versions = 1.0.3. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.4...
CVE-2021-24774: Improper Neutralization of Special Elements used in an SQL Command
The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues...
WordPress Check & Log Email plugin <= 1.0.2 - Multiple SQL Injection (SQLi) vulnerabilities
Multiple SQL Injection SQLi vulnerabilities were discovered by bl4derunner in WordPress Check & Log Email plugin versions = 1.0.2. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.3...
WordPress Check & Log Email plugin <= 0.5 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability discovered by ethicalhack3r in WordPress Check & Log Email plugin versions = 0.5. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 0.5.2...