WordPress Plugin Vulnerabilities

st_newsletter - (stnl_iframe.php) SQL Injection

Description

The st_newsletter WordPress plugin was affected by a (stnl_iframe.php) SQL Injection security vulnerability.

Affects Plugins

Plugin icon
st_newsletter
No known fix

References

CVE
CVE-2008-4625
Exploitdb
6777

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
d26ff708-4a01-41cb-803a-7d6df6805e48

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2023-10-26
Title
LogDash Activity Log < 1.1.4 - Unauthenticated SQLi
Published
2021-09-16
Title
Buddyboss Platform < 1.7.9 - Subscriber+ SQL Injection
Published
2014-08-01
Title
Copperleaf Photolog - SQL injection
Published
2024-12-05
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.5 - Authenticated (Subscriber+) SQL Injection
Published
2018-08-26
Title
Gift Voucher < 4.1.8 - Unauthenticated Blind SQL Injection