Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-22540 EUVD-2025-2818GHSA-rv32-jqvp-4638

WordPress Emailing Subscription Plugin <= 1.4.1 - SQL Injection vulnerability

Published Jan 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in seballero Emailing Subscription email-suscripcion allows Blind SQL Injection.This issue affects Emailing Subscription: from n/a through <= 1.4.1.

Affected products

VendorProductAffectedFixed
seballero Emailing Subscription ≤ 1.4.1 —

References