| Package | Affected versions | Patched versions |
|---|---|---|
| email log | < 2.4.7 | 2.4.7 |
The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free