Read the docs

Sendit Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Sendit Project records in CISA KEV

No Sendit Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sendit 1 record LOW

Records

1 record in Sendit · all components

TI-2021-06637 CVE-2021-24345 · GHSA-hmg5-2fm4-j8w9

Sendit WP Newsletter <= 2.5.1 - Authenticated (admin+) SQL Injection

Priority LOW 32

The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the id_lista POST parameter before using it in SQL stat…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01338 Published 2021-06-14 No fix listed CWE-89
Open these records in search →