Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:enl_newsletter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductEnl Newsletter (044ee85e-1939-53e9-98de-ecf2158d2e93)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3060 vulnerable 2026-06-08 06:41:52.332674 ENL Newsletter <= 1.0.1 - Admin+ SQL Injection
The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks
Published: 2024-04-26T05:00:04.385Z
Updated: 2024-08-01T19:32:42.649Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.