Read the docs

Techspawn

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Techspawn records in CISA KEV

No Techspawn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Multiloca 1 record LOW Wp-email-users 1 record MEDIUM

Records

1 record in Wp-email-users · all components

TI-2021-07238 CVE-2021-24959 · GHSA-h8f7-qg7p-xgpg

WP Email Users <= 1.7.6 - Subscriber+ SQL Injection

Priority MEDIUM 42

The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02249 Published 2022-03-14 No fix listed CWE-89
Open these records in search →