Vulnerabilities

TI-2025-17547 CVE-2025-23780 · GHSA-v545-qj8m-vh2j

WordPress Easy Code Snippets Plugin <= 1.0.2 - SQL Injection vulnerability

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpha BPO Easy Code Snippets easy-code-snippets allows SQL Injection.This issue affects Easy Code Snippets: from n/a t…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00639 Published 2025-01-16 No fix listed CWE-89

TI-2023-22089 CVE-2023-41664 · GHSA-97g5-8v5w-2cf2

WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability

HIGH 68

Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00544 Published 2024-12-13 No fix listed CWE-862

TI-2023-04697 CVE-2023-5108 · GHSA-37c8-cpvc-wggr

Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi

LOW 33

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admi…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00958 Published 2023-12-04 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Easy Code Snippets Plugin <= 1.0.2 - SQL Injection vulnerability

WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability

Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi