Email Log

Email Log has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2024; all 4 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Code Injection, SQL Injection.

Every one of the 4 issues recorded for Email Log has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Email Log is installed on roughly 80,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Email Log vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2024-0867

Email Log <= 2.4.8 - Unauthenticated Hook Injection

Read the full analysis

Vulnerability Records

4 records
Email Log banner
Latestv2.63
4.2(43)
84/100
Last Updated
2026-08-16 (27d ago)
Active Installs
80,000+
Downloads
1,122,400
Requires WP
4.0+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2009-10-10 (17y ago)

Email Log is a WordPress plugin that allows you to easily log and view all emails that were sent from WordPress. This would be very useful for debugging email related problems in your WordPress site or for storing sent emails for auditing purposes, especially on ecommerce sites that are setup with either WooCommerce or Easy Digital Downloads. You can perform advanced actions like re-sending email, automatically forwarding emails, export logs and automatically monitor email deliverability with the PRO version. Works with WordPress Multisite as well. Viewing logged emails The logged emails will be stored in a separate table and can be viewed from the admin interface. While viewing the logs, the emails can be filtered or sorted based on the date, email, subject etc. Deleting logged emails In the admin interface, all the logged emails can be delete in bulk or can also be selectively deleted based on date, email and subject. If you want to automatically delete the email logs after some days upgrade to the PRO version. Resend email (PRO version) Resend the email directly from the email log. You can modify the different fields of the email before resending it. More Fields (PRO version) Get access to additional fields in the email log page. The following are the additional fields that are added in the pro version. From CC BCC Reply To Attachment Forward email (PRO version) Pro version allows you to send a copy of all the emails send from WordPress to another email address. You can choose whether you want to forward through to, cc or bcc fields. This can be extremely useful when you want to debug by analyzing the emails that are sent from WordPress. Export email logs (PRO version) Export the email logs as a CSV file for further processing or record keeping. Documentation You can find fully searchable documentation in the doc section of the Email Log website.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C