cleantalk
Vulnerabilities and Security Researches

Check & Log Email, CVE-2026-5306

CVE, Research URL

CVE-2026-5306

Application

Check & Log Email

Published on
Apr 28, 2026
Research Description
The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled
Affected versions
max 2.0.13.
Status
vulnerable