WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection

CVE-2022-46818

What is CVE-2022-46818?

The Email Posts to Subscribers plugin by Gopi Ramasamy contains a vulnerability that allows attackers to exploit improper neutralization of special elements within SQL commands. This SQL Injection vulnerability can enable unauthorized access to sensitive data and manipulation of the database. It affects versions from n/a through 6.2, posing a significant risk for users who have not applied necessary updates. Proper validation and sanitization of input are critical to mitigate this issue.

References