Skip to content
OpenAdvisories

Vendor

checkemail

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Check & Log Email <= 1.0.9 - Unauthenticated Hook Injection

    The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 1.0.9 via the check_nonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPres…