Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-41555 EUVD-2026-93045GHSA-jmm7-jg22-c3c6

WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: Weblizar – WordPress Themes & Plugin Product: Newsletter Subscription Form – User Subscriptions Form, Capture Email

Description

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

Affected products

VendorProductAffectedFixed
Weblizar – WordPress Themes & Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email ≤ 1.5.9 —

References