CVE-2023-6620 — Post SMTP < 2.8.7 - Admin+ SQL Injection
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection explo…
Published: 2024-01-15 · CVSS: 7.2 · CVSS 3.1
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7