Veille CVE

Recherche « Unknown Check & Log Email »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Check & Log Email » ✕
  1. CVE-2026-16578 7.5 Élevée

    Unknown Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection

    The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, email addresses, roles, and two-factor authentication enrollment status.

  2. CVE-2026-14554 6.5 Moyenne

    Unknown Check & Log Email

    The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.

  3. CVE-2026-5306 5.4 Moyenne

    Unknown Check & Log Email

    The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled