Skip to content
fr Sign in
4.5 Medium

CVE-2024-3060 The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL…

Description

The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks

Affected products and versions

Product Affected versions Fixed in
ENL Newsletter 1.0 earliest → 1.0.1 No fix stated
enl_newsletter Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ENL Newsletter

The 3 CVEs of ENL Newsletter →
CVE-2024-3058 The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation… 5.4 Medium CVE-2024-3059 The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow… 5.7 Medium
Track this CVE