Input validation vulnerability in Easy Newsletter Signups 1.0.4

The Easy Newsletter Signups plugin for WordPress is vulnerable to a security problem called SQL Injection. This security problem allows people with administrator-level access to extract sensitive information from the database. This security problem exists in all versions of the plugin up to version 1.0.4 due to the plugin not properly dealing with user supplied information and not properly preparing existing SQL queries.

Detected in:

Easy Newsletter Signups open vulnerable versions: >= * <= 1.0.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.