WordPress Plugin Vulnerabilities

Email Log <= 2.2.2 - Stored Cross-Site Scripting (XSS)

Description

The Email Log WordPress plugin was affected by a Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
email-log
Fixed in 2.2.3

References

URL
https://postmansmtp.com/post-smtp-full-email-log-preview-security/
URL
https://plugins.trac.wordpress.org/changeset/1762170/email-log

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
899adb54-3078-40bd-a5a8-dab19bfbb85c

Timeline

Publicly Published
2017-11-11 (about 8 years ago)
Added
2017-11-13 (about 8 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2020-01-21
Title
Chatbot with IBM Watson < 0.8.21 - DOM Cross-Site Scripting (XSS)
Published
2025-10-03
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 27.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2014-08-01
Title
Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS
Published
2024-09-10
Title
Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Published
2025-07-09
Title
Event Manager < 7.0.4 - Reflected Cross-Site Scripting via `calendar_header` Parameter