EUVD-2026-76835

The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to generic SQL Injection via Parameter Name in all versions up to, and including, 5.1.24 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-77161 Smart Marketing SMS and Newsletters Forms <= 5.1.24 - Authenticated (Subscriber+) SQL Injection via Parameter Name

The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to generic SQL Injection via Parameter Name in all versions up to, and including, 5.1.24 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-77161

The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to SQL Injection via Parameter Name in all versions up to and including 5.1.24 . The root cause is insufficient escaping on a user-supplied parameter and lack of sufficient preparation of the existing SQL query, allo...

CVE-2026-77161: Improper Neutralization of Special Elements used in an SQL Command

The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to generic SQL Injection via Parameter Name in all versions up to, and including, 5.1.24 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

PT-2026-90595

Name of the Vulnerable Software and Affected Versions Smart Marketing SMS and Newsletters Forms versions prior to 5.1.25 Description This issue is a generic SQL Injection that allows authenticated attackers with subscriber-level access and above to append additional SQL queries to existing ones,...

CVE-2026-81756

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

EUVD-2026-68784

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

CVE-2026-81756

An unauthenticated SQL injection vulnerability exists in the WordPress plugin Smart Marketing SMS and Newsletters Forms in versions

CVE-2026-81756 WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

CVE-2026-81756 WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

CVE-2026-81756: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

PT-2026-84009

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Smart Marketing SMS and Newsletters Forms versions = 5.1.24...

CVE-2024-53784

CVE-2024-53784 affects the WordPress plugin Smart Marketing for WP (Smart Marketing SMS and Newsletters Forms). Description confirms a Missing Authorization vulnerability allowing exploitation of incorrectly configured access controls in versions up to 5.0.9. CVSS 3.1 base score 4.3 (Network, Low...

CVE-2024-53784: Missing Authorization

Missing Authorization vulnerability in E-goi Smart Marketing SMS and Newsletters Forms smart-marketing-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Marketing SMS and Newsletters Forms: from n/a through = 5.0.4...

PT-2024-35897

Name of the Vulnerable Software and Affected Versions E-goi Smart Marketing SMS and Newsletters Forms versions n/a through 5.0.9 Description The issue is related to a missing authorization vulnerability in E-goi Smart Marketing SMS and Newsletters Forms, which allows exploiting incorrectly...

CVE-2017-18010

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...

CVE-2017-18010: Improper Neutralization of Input During Web Page Generation

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...

PT-2018-6606

Name of the Vulnerable Software and Affected Versions: E-goi Smart Marketing SMS and Newsletters Forms plugin versions prior to 2.0.0 Description: The issue concerns a cross-site scripting XSS flaw. It can be exploited via the "url" parameter in the admin/partials/custom/egoi-for-wp-form egoi.php...