CVE-2023-5108

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2023-5108

CVE-2023-5108 affects the WordPress plugin “Easy Newsletter Signups” (versions up to 1.0.4). The root cause is improper sanitisation/escaping of a parameter used in a SQL statement, resulting in a SQL injection. The vulnerability is exploitable by high-privilege users such as admin, with the pote...