CVE-2021-24959

CVE-2021-24959 Description The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks. CVE CVE-2021-24959 CVSS 8.8 High Publicly Published Januar...

CVE-2021-24959

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...

Exploit for SQL Injection in Techspawn Wp-Email-Users

CVE-2021-24959 Description --- The WP Email Users WordPress...

CVE-2021-24959

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...

Sql injection

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...

CVE-2021-24959

The CVE-2021-24959 issue affects the WordPress plugin WP Email Users (

PT-2022-9529

Name of the Vulnerable Software and Affected Versions WP Email Users WordPress plugin versions prior to 1.8 Description The issue allows authenticated users to perform SQL injection attacks due to the lack of escaping of the data raw parameter in the /wp-admin/admin-ajax.php "weu selected users 1...

CVE-2021-24959: Improper Neutralization of Special Elements used in an SQL Command

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...