Email Subscribers & Newsletters vulnerabilities
We track 1 vulnerability in Email Subscribers & Newsletters products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Email Subscribers & Newsletters vulnerabilities
- 8.8 High severity
Email Subscribers & Newsletters: Improper Neutralization of Special Elements used in an SQL Command
The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the `order` and `orderby` parameters to the `ajax_fetch_report_list` action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscribe