CVE-2026-14554 — Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters

CVE-2026-14554

Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters PUBLISHED

Description (CNA)

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Check & Log Email	affected 0 before 2.0.15

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/7b39bae3-41a2-4862-b7c3-1a386273d600/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.