High · 7.3 CVE-2021-44779 EUVD-2021-31584GHSA-m476-gc4w-5q6x

WordPress [GWA] AutoResponder plugin <= 2.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Published Feb 4, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: G.J.P. Product: [GWA] AutoResponder (WordPress plugin) Category: Web / CMS

Description

Unauthenticated SQL Injection (SQLi) vulnerability discovered in [GWA] AutoResponder WordPress plugin (versions <= 2.3), vulnerable at (&listid). No patched version available, plugin closed.

Affected products

Vendor	Product	Affected	Fixed
G.J.P.	[GWA] AutoResponder (WordPress plugin)	<= 2.3 – ≤ 2.3	—

References

https://wordpress.org/plugins/gwa-autoresponder/
https://patchstack.com/database/vulnerability/gwa-autoresponder/wordpress-gwa-autoresponder-plugin-2-3-unauthenticated-sql-injection-sqli-vulnerability