Unrated

Post SMTP < 2.8.7 - Admin+ SQL Injection

CVE-2023-6620 First seen on SecPulse Jan 16, 2024

Original description The description as published by the source.

The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jan 16, 2024
First seen on SecPulse: Jan 16, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:59