Description The email-newsletter plugin through 20.15 for WordPress has SQL injection. References https://wordpress.org/plugins/email-newsletter/#developers https://wordpress.org/support/topic/susceptible-to-sql-injection-attack/ https://wordpress.org/plugins/email-newsletter/advanced/