blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2026-14554

MEDIUM 6.5 CVSS 3.1
Published
July 31, 2026
Last modified
August 26, 2026
NVD status
Deferred
Reported by
contact@wpscan.com
Weakness
CWE-89
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.

Affected products and versions

  • Unknown Check & Log Email — Before 2.0.15

References

  • wpscan.com https://wpscan.com/vulnerability/7b39bae3-41a2-4862-b7c3-1a386273d600/
  • nvd.nist.gov Official NVD record