CVE-2015-9334

The email-newsletter plugin through 20.15 for WordPress has SQL injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Email-newsletter (Email-newsletter Project)

References

• https://wordpress.org/plugins/email-newsletter/#developers
• https://wordpress.org/plugins/email-newsletter/advanced/
• https://wordpress.org/support/topic/susceptible-to-sql-injection-attack/