What is CVE-2026-14554?

CVE-2026-14554 is a medium-severity vulnerability in Check & Log Email, classified under SQL Injection. CVSS score: 6.5/10. Published 2026-07-31.

How severe is CVE-2026-14554?

Medium severity. CVSS v3 base score is 6.5 out of 10.

SQL Injection in Check & Log Email

CVE-2026-14554

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.

Vulnerability class: SQL Injection

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N.

Affected products

Unknown Check & Log Email — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-14554?: CVE-2026-14554 is a medium-severity vulnerability in Check & Log Email, classified under SQL Injection. CVSS score: 6.5/10. Published 2026-07-31.
How severe is CVE-2026-14554?: Medium severity. CVSS v3 base score is 6.5 out of 10.