This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-5306 | BDVDB-2026-329338 Detail

Check & Log Email

Description#

The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.