Vulnerability Details CVE-2021-24758
The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
Products affected by CVE-2021-24758
-
cpe:2.3:a:email_log_project:email_log:-
-
cpe:2.3:a:email_log_project:email_log:0.1
-
cpe:2.3:a:email_log_project:email_log:0.2
-
cpe:2.3:a:email_log_project:email_log:0.3
-
cpe:2.3:a:email_log_project:email_log:0.4
-
cpe:2.3:a:email_log_project:email_log:0.5
-
cpe:2.3:a:email_log_project:email_log:0.6
-
cpe:2.3:a:email_log_project:email_log:0.7
-
cpe:2.3:a:email_log_project:email_log:0.8
-
cpe:2.3:a:email_log_project:email_log:0.8.1
-
cpe:2.3:a:email_log_project:email_log:0.9
-
cpe:2.3:a:email_log_project:email_log:0.9.1
-
cpe:2.3:a:email_log_project:email_log:0.9.2
-
cpe:2.3:a:email_log_project:email_log:0.9.3
-
cpe:2.3:a:email_log_project:email_log:1.0
-
cpe:2.3:a:email_log_project:email_log:1.1
-
cpe:2.3:a:email_log_project:email_log:1.5
-
cpe:2.3:a:email_log_project:email_log:1.5.1
-
cpe:2.3:a:email_log_project:email_log:1.5.2
-
cpe:2.3:a:email_log_project:email_log:1.5.3
-
cpe:2.3:a:email_log_project:email_log:1.5.4
-
cpe:2.3:a:email_log_project:email_log:1.6
-
cpe:2.3:a:email_log_project:email_log:1.6.1
-
cpe:2.3:a:email_log_project:email_log:1.6.2
-
cpe:2.3:a:email_log_project:email_log:1.7
-
cpe:2.3:a:email_log_project:email_log:1.7.1
-
cpe:2.3:a:email_log_project:email_log:1.7.2
-
cpe:2.3:a:email_log_project:email_log:1.7.3
-
cpe:2.3:a:email_log_project:email_log:1.7.4
-
cpe:2.3:a:email_log_project:email_log:1.7.5
-
cpe:2.3:a:email_log_project:email_log:1.8
-
cpe:2.3:a:email_log_project:email_log:1.8.1
-
cpe:2.3:a:email_log_project:email_log:1.8.2
-
cpe:2.3:a:email_log_project:email_log:1.9
-
cpe:2.3:a:email_log_project:email_log:1.9.1
-
cpe:2.3:a:email_log_project:email_log:2.0.0
-
cpe:2.3:a:email_log_project:email_log:2.0.1
-
cpe:2.3:a:email_log_project:email_log:2.0.2
-
cpe:2.3:a:email_log_project:email_log:2.1.0
-
cpe:2.3:a:email_log_project:email_log:2.2.0
-
cpe:2.3:a:email_log_project:email_log:2.2.1
-
cpe:2.3:a:email_log_project:email_log:2.2.2
-
cpe:2.3:a:email_log_project:email_log:2.2.3
-
cpe:2.3:a:email_log_project:email_log:2.2.4
-
cpe:2.3:a:email_log_project:email_log:2.2.5
-
cpe:2.3:a:email_log_project:email_log:2.3.0
-
cpe:2.3:a:email_log_project:email_log:2.3.1
-
cpe:2.3:a:email_log_project:email_log:2.3.2
-
cpe:2.3:a:email_log_project:email_log:2.4.0
-
cpe:2.3:a:email_log_project:email_log:2.4.1
-
cpe:2.3:a:email_log_project:email_log:2.4.2
-
cpe:2.3:a:email_log_project:email_log:2.4.3
-
cpe:2.3:a:email_log_project:email_log:2.4.4
-
cpe:2.3:a:email_log_project:email_log:2.4.5
-
cpe:2.3:a:email_log_project:email_log:2.4.6