| Package | Affected versions | Patched versions |
|---|---|---|
| email subscribers & newsletters | < 4.3.1 | 4.3.1 |
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free