CVE-2023-5108 | BDVDB-2026-218218 Detail

Easy Newsletter Signups

Description#

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/1b277929-e88b-4ab6-9190-526e75f5ce7a

Exploit#

https://wpscan.com/vulnerability/1b277929-e88b-4ab6-9190-526e75f5ce7a

History#

Version 12023-12-04Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.