CVE-2021-24774: Wpchill Check & Log Email

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues

Affected products

• Wpchill Check & Log Email: before 1.0.3 (fixed in 1.0.3)

Published 2021-10-25. Last modified 2026-06-17.