← CVE Intelligence

CVE-2023-6620

Post SMTP < 2.8.7 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.

Affected (CNA)

Vendor / productVersions
Unknown / POST SMTP Maileraffected 0 before 2.8.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.