What is CVE-2026-14554?
CVE-2026-14554 is an SQL injection vulnerability in the Check & Log Email WordPress plugin before version 2.0.15, caused by insufficient sanitization and escaping of parameters. It allows users with administrator privileges to perform malicious SQL queries. Immediate update to the latest plugin version is recommended.
Azərbaycanca: CVE-2026-14554, Check & Log Email WordPress plaginində 2.0.15-dən əvvəlki versiyalarda aşkar edilmiş SQL injection zəifliyidir. Bu, administrator imtiyazlı istifadəçilərə parametrlər vasitəsilə zərərli SQL sorğuları icra etməyə imkan verir. Plagini dərhal ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-89
FAQ2
Which WordPress plugin is affected by CVE-2026-14554?
This vulnerability affects the Check & Log Email plugin versions prior to 2.0.15.
What privilege level is required to exploit CVE-2026-14554?
This vulnerability can be exploited by users with administrator privileges.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.