← Back

Email Log Project

email_log_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Email Log
email_log
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24924
1Email Log Project
1Email Log
Jun 17, 2026
Dec 6, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue
CVE-2021-24758
1Email Log Project
1Email Log
Jun 17, 2026
Nov 17, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections