CVE-2021-24924

The CVE-2021-24924 relates to the WordPress Email Log plugin before version 2.4.8. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by not escaping the d parameter before echoing it in an attribute on the Log page. Affected component: Email Log plugin (WordPress). Impact i...

CVE-2021-24758

CVE-2021-24758 affects the WordPress Email Log plugin prior to 2.4.7. The vulnerability arises from improper validation, sanitisation and escaping of the orderby and order GET parameters used in SQL within the admin dashboard, enabling SQL injection. A fix exists in version 2.4.7 (upgrade to 2.4....