medium5.4
CVE-2026-5306
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS …
Impact
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled
Affected products
| Product | Affected versions |
|---|---|
| Check & Log Email WordPress Plugin | before 2.0.13 |
Versions were read from the advisory text. No structured product data has been published for this record yet.