CVE-2018-1002000 Arigato Autoresponder and Newsletter <= 2.5.1.8 - SQL Injection
HighCVSS 7.2
EPSS 4.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kibokolabs arigato autoresponder and newsletter | = 2.5.1.8 | No fix listed |
| Kiboko Labs https://calendarscripts.info/ Arigato Autoresponder and Newsletter | <= 2.5.1.8 | No fix listed |
| wordpress bft-autoresponder(WordPress) | < 2.5.1.9 | 2.5.1.9 |
References
- www.vapidlabs.com exploit third-party-advisory
- wordpress.org product
- 45434 exploit third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org