exploitDog

CVE-2015-9334

Опубликовано: 22 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The email-newsletter plugin through 20.15 for WordPress has SQL injection.

Ссылки

https://wordpress.org/plugins/email-newsletter/#developers
Product
https://wordpress.org/plugins/email-newsletter/advanced/
Product
https://wordpress.org/support/topic/susceptible-to-sql-injection-attack/
Third Party Advisory
https://wordpress.org/plugins/email-newsletter/#developers
Product
https://wordpress.org/plugins/email-newsletter/advanced/
Product
https://wordpress.org/support/topic/susceptible-to-sql-injection-attack/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:email-newsletter_project:email-newsletter:*:*:*:*:*:wordpress:*:*

Версия до 20.15 (включая)

EPSS

Процентиль: 69%

0.00614

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-5pc7-9xqm-mjmx

CVSS3: 9.8

github

больше 3 лет назад

The email-newsletter plugin through 20.15 for WordPress has SQL injection.

EPSS

Процентиль: 69%

0.00614

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89