CVE-2017-6574

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6574

The CVE-2017-6574 entry affects the Mail Masta (mail-masta) WordPress plugin v1.0. The vulnerability is a SQL injection in the code path ./inc/lists/edit_member.php with the GET parameter filter_list, exploitable from WordPress admin context. Impact described as arbitrary SQL execution with high ...