WordPress plugin
Check & Log Email – Easy Email Testing & Mail logging security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium4
- Low0
All Check & Log Email – Easy Email Testing & Mail logging vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤2.0.14Update to 2.0.15 | CVE-2026-14554 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting <2.0.13Update to 2.0.13 | CVE-2026-5306 | |
| High8.1 | Unauthenticated Hook Injection ≤1.0.9Update to 1.0.10 | CVE-2024-0866 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.5Update to 1.0.6 | CVE-2022-1547 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.0.4Update to 1.0.4 | CVE-2021-24908 | |
| High7.2 | Admin+ SQL Injection via Order and OrderBy parameters ≤1.0.2Update to 1.0.3 | CVE-2021-24774 | |
| Medium6.1 | Reflected Cross-Site Scripting <0.5.2Update to 0.5.2 | CVE-2016-10934 |
- Medium4.9Authenticated (Administrator+) SQL Injection
≤2.0.14Update to 2.0.15
- High7.2Unauthenticated Stored Cross-Site Scripting
<2.0.13Update to 2.0.13
- High8.1Unauthenticated Hook Injection
≤1.0.9Update to 1.0.10
- Medium6.1Reflected Cross-Site Scripting
≤1.0.5Update to 1.0.6
- Medium6.1Reflected Cross-Site Scripting
<1.0.4Update to 1.0.4
- High7.2Admin+ SQL Injection via Order and OrderBy parameters
≤1.0.2Update to 1.0.3
- Medium6.1Reflected Cross-Site Scripting
<0.5.2Update to 0.5.2
Check & Log Email – Easy Email Testing & Mail logging: common questions
Does Check & Log Email – Easy Email Testing & Mail logging have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Check & Log Email – Easy Email Testing & Mail logging: 3 high, 4 medium. None are known to affect version null.
How do I check which version of Check & Log Email – Easy Email Testing & Mail logging I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Check & Log Email – Easy Email Testing & Mail logging vulnerability?
CVE-2026-14554, published Jul 13, 2026: Check & Log Email <= 2.0.14 - Authenticated (Administrator+) SQL Injection. Severity: Medium (CVSS 4.9).
Is any Check & Log Email – Easy Email Testing & Mail logging vulnerability listed in CISA KEV?
No. None of the known Check & Log Email – Easy Email Testing & Mail logging vulnerabilities is currently listed in the CISA KEV catalog.