Mail logging - WP Mail Catcher < 2.1.4 - Admin+ SQLi

2023-12-2900:00:00

wpscan.com

mail logging

wp mail catcher

sql injection

admin+

high privilege users

security vulnerability

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

References

patchstack.com/database/vulnerability/wp-mail-catcher/wordpress-wp-mail-catcher-plugin-2-1-3-sql-injection-vulnerability