WordPress Plugin Vulnerabilities

Newsletter < 3.0.9 - SQL Injection

Description

The Newsletter WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
newsletter
Fixed in 3.0.9

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
6.7 (medium)

Miscellaneous

Verified
No
WPVDB ID
0e11d6c7-5e2c-43e1-9c5d-5f6236d52202

Timeline

Publicly Published
2013-02-03 (about 11 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2020-08-12 (about 3 years ago)

Other

Published
Title
Published
2017-06-27
Title
Ultimate Product Catalogue <= 4.2.2 - Authenticated SQL Injection
Published
2014-08-01
Title
yolink Search <= 1.1.4 - includes/bulkcrawl.php Multiple Parameter SQL Injection
Published
2015-02-09
Title
Users Ultra <= 1.4.35 - SQL Injection
Published
2016-12-12
Title
WP Private Messages 1.0.1 – Authenticated SQL Injection
Published
2017-09-19
Title
WordPress 2.3.0-4.8.1 - $wpdb->prepare() potential SQL Injection