Unrated

WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability

CVE-2024-52436 First seen on SecPulse Nov 18, 2024

Original description The description as published by the source.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects Post SMTP: from n/a through <= 2.9.9.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory patchstack.com
web wordpress.org

Key facts

Severity: Unrated
Published: Nov 18, 2024
First seen on SecPulse: Nov 18, 2024
CWE: CWE-89

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04