Skip to content
OpenAdvisories
Unscored CVE-2020-5768 EUVD-2020-26927GHSA-qwmp-427r-mgjp

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for …

Published Jul 17, 2020 · Updated Aug 4, 2024 · Assigned by tenable

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields.

Affected products

VendorProductAffectedFixed
— Icegram Email Subscribers & Newsletters Plugin for WordPress 4.4.8 —

References