Lucene search
+L

29 matches found

Patchstack
Patchstack
•added 2022/05/02 12:00 a.m.•16 views

WordPress Check & Log Email plugin <= 1.0.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Check & Log Email plugin versions = 1.0.5. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.6...

2.1AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2021/12/01 12:00 a.m.•57 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-102401)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the Check ...

6.1CVSS6AI score0.00782EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2021/11/29 8:25 a.m.•36 views

CVE-2021-24908 Check & Log Email < 1.0.4 - Reflected Cross-Site Scripting

The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

6.3AI score0.00782EPSS
SaveExploits2References1
CVE
CVE
•added 2021/11/29 8:25 a.m.•74 views

CVE-2021-24908

The CVE concerns the WordPress plugin Check & Log Email (before version 1.0.4). The vulnerability arises from improper escaping of the d parameter when it is echoed inside an attribute, enabling a Reflected Cross-Site Scripting (XSS) condition. Affected version range is up to 1.0.3; version 1.0.4...

6.1CVSS6.1AI score0.00782EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/29 12:00 a.m.•1 views

CVE-2021-24908: Improper Neutralization of Input During Web Page Generation

The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.00782EPSS
SaveExploits2References3
Patchstack
Patchstack
•added 2021/11/01 12:00 a.m.•16 views

WordPress Check & Log Email plugin <= 1.0.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by JrXnm in WordPress Check & Log Email plugin versions = 1.0.3. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.4...

2AI score0.00782EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•6 views

CVE-2021-24774: Improper Neutralization of Special Elements used in an SQL Command

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues...

7.2CVSS5.9AI score0.01317EPSS
SaveExploits2References3
Patchstack
Patchstack
•added 2021/09/27 12:00 a.m.•57 views

WordPress Check & Log Email plugin <= 1.0.2 - Multiple SQL Injection (SQLi) vulnerabilities

Multiple SQL Injection SQLi vulnerabilities were discovered by bl4derunner in WordPress Check & Log Email plugin versions = 1.0.2. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.3...

2.7AI score0.01317EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2016/11/12 12:00 a.m.•19 views

WordPress Check & Log Email plugin <= 0.5 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by ethicalhack3r in WordPress Check & Log Email plugin versions = 0.5. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 0.5.2...

2.1AI score0.00913EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder