← Back

Wp Email Users

wp-email-users

Vendor: Techspawn • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Techspawn
1Wp Email Users
Jun 17, 2026
Mar 14, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks.