Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin MailPoet Newsletters (Previous) SQL Injection - CVE-2013-1408 - Vulnerability Database
WP Plugin Wysija Newsletters

WordPress Plugin MailPoet Newsletters (Previous) SQL Injection - CVE-2013-1408

Critical
Reference: CVE-2013-1408
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-1408
Title: WordPress Plugin MailPoet Newsletters (Previous) SQL Injection
Overview:

WordPress Plugin MailPoet Newsletters (Previous) is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application access or modify data or exploit latent vulnerabilities in the underlying database. WordPress Plugin MailPoet Newsletters (Previous) version 2.2 is vulnerable prior versions may also be affected.