WordPress Plugin Vulnerabilities

Email Newsletter <= 20.15 - SQL Injection

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
email-newsletter
No known fix

References

CVE
CVE-2015-9334

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
eedd108e-6766-42f1-99d1-fbadf175ef4d

Timeline

Publicly Published
2015-12-01 (about 10 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-09-10
Title
All in one Minifier <= 3.2 - Unauthenticated SQL Injection
Published
2023-11-20
Title
EazyDocs < 2.3.4 - Subscriber + SQLi
Published
2026-04-29
Title
JoomSport – for Sports: Team & League, Football, Hockey & more < 5.7.8 - Unauthenticated SQL Injection
Published
2026-01-28
Title
Nestbyte Core <= 1.2 - Unauthenticated SQL Injection
Published
2025-04-21
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) SQL Injection