The Email Subscribers plugin for WordPress, created by Icegram Express, has a security flaw that allows attackers to access sensitive information from the database. This is due to a lack of proper protection on a user-supplied parameter and an inadequate SQL query. Attackers can insert their own SQL queries into existing ones and gain unauthorized access to data.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
