CVE-2026-5306 — Check & Log Email < 2.0.13 - Unauthenticated Stored XSS

CVE-2026-5306

Check & Log Email < 2.0.13 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled

Affected (CNA)

Vendor / product	Versions
Unknown / Check & Log Email	affected 0 before 2.0.13

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/97908c15-6e7a-4242-8c6f-66c8b804364c/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.