Read the docs

Speakout! Email Petitions Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Speakout! Email Petitions Project records in CISA KEV

No Speakout! Email Petitions Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 53

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection explo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08785 Published 2022-03-28 Fixed in 2.14.15.1 CWE-89
Open these records in search →