WordPress Sendit WP Newsletter plugin SQL injection vulnerability

WordPress is the WordPress (Wordpress) Foundation’s suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. SQL injection vulnerability exists in WordPress Sendit WP Newsletter plugin version 2.5.1 and earlier, which stems from an administrator user’s failure to clean, validate or escape the id_lista POST parameter before using the plugin in a SQL statement. validate or escape before using the plugin in a SQL statement. An attacker could exploit this vulnerability to execute illegal SQL statements.