CVE-2023-5108

Summary

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

Affected Software

VendorProductVersion RangeStatus
UnknownEasy Newsletter Signups0 <= 1.0.4affected

Weaknesses

  • CWE-89 SQL Injection

ADP Enrichment

CVE Program Container

Additional References

References