WordPress Plugin Vulnerabilities
Email Subscribers & Newsletters < 4.1.8 - SQL Injection
Description
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.
Affects Plugins
Fixed in 4.1.8 References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Tin Duong of Fortinet’s FortiGuard Labs, WordPress Plugin Review Team & Ihor Voschyk
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-07-22 (about 6 years ago)
Added
2019-07-22 (about 6 years ago)
Last Updated
2020-08-07 (about 5 years ago)
WPScan 