Wysija Newsletters

wysija_newsletters

Vendor: Wysija Newsletters Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2013-1408

1Wysija Newsletters Project

1Wysija Newsletters

May 6, 2026

Mar 24, 2014

N/A· v4

N/A· v3

6.5 MEDIUM· v2

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2) orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.Show less