Threats tagged 'ghsa-wjfc-ffhr-q953'

CVE-2026-14554 is a SQL injection vulnerability in the Check & Log Email WordPress plugin versions before 2.0.15. It arises because the plugin does not properly sanitize and escape parameters used in SQL queries. This flaw allows users with administrator privileges to perform SQL injection attacks, potentially leading to unauthorized data access or modification. The vulnerability has a medium severity rating with a CVSS score of 6.5. No official patch or remediation guidance is currently provided by the vendor.