Input validation vulnerability in Mail logging – WP Mail Catcher 2.1.4

The Mail logging – WP Mail Catcher plugin for WordPress has a security vulnerability that affects all versions up to 2.1.4 (but not versions higher than that). An attacker that has administrator access (or higher) to the WordPress site can add malicious code to existing queries that can be used to extract sensitive information from the database. This is possible because the plugin does not properly escape user-supplied parameters and does not properly prepare existing SQL queries.