Skip to content
OpenAdvisories

Product · webfactory

Email Log

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-94174

    WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability

    Administrator SQL Injection in Email Log <= 2.63 versions.

    webfactory Email Log
  • High 8.1
    CVE-2024-0867

    Email Log <= 2.4.8 - Unauthenticated Hook Injection

    The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the check_nonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under …

    webfactory Email Log Web / CMS