CVE-2015-9334: SQL Injection
Published Aug 22, 2019
·Updated
The email-newsletter plugin through 20.15 for WordPress has SQL injection.
Affected Software
1 affected component
Email-newsletter Project Email-newsletter Wordpress<=20.15
Event History
Aug 22, 2019
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-9334?
CVE-2015-9334 is considered a medium severity vulnerability due to its potential for SQL injection.
2
How do I fix CVE-2015-9334?
To fix CVE-2015-9334, update the email-newsletter plugin to the latest version beyond 20.15.
3
What systems are affected by CVE-2015-9334?
CVE-2015-9334 affects the email-newsletter plugin versions up to 20.15 for WordPress.
4
What kind of attack can exploit CVE-2015-9334?
CVE-2015-9334 can be exploited via SQL injection attacks, allowing unauthorized database access.
5
Is there a known workaround for CVE-2015-9334?
Currently, the recommended action for CVE-2015-9334 is to update the plugin, as no official workaround is provided.