CVE-2026-94174: WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability
Published Sep 23, 2026
·Updated
Administrator SQL Injection in Email Log <= 2.63 versions.
Affected Software
1 affected component
WordPress Email Log plugin<=2.63
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Email Log pluginto a version that resolves this vulnerability.Fixed in 2.64
Event History
Sep 23, 2026
CVE Published
via MITRE·06:14 PM
Data Sourced
via MITRE·06:14 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
An attacker needs administrator-level privileges. The issue is remotely exploitable with low attack complexity and does not require user interaction.
2
What impact is indicated by the severity vector?
The vulnerability is rated as having high confidentiality impact and low availability impact. No integrity impact is indicated.