← CVE Intelligence

CVE-2026-41555

WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability PUBLISHED

Description (CNA)

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

Affected (CNA)

Vendor / productVersions
Weblizar – WordPress Themes & Plugin / Newsletter Subscription Form – User Subscriptions Form, Capture Emailaffected n/a through 1.5.9

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.