SQL Injection Vulnerability in Email Tracker Plugin for WordPress
CVE-2025-10047
4.9MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 22 October 2025
What is CVE-2025-10047?
The Email Tracker plugin for WordPress is susceptible to SQL injection through the 'orderby' parameter due to inadequate input escaping and improper handling of the SQL query. This vulnerability allows authenticated attackers with Administrator-level access to manipulate the SQL queries, potentially extracting sensitive information from the underlying database. Users are advised to update to the latest version to mitigate the risks associated with this vulnerability.
Affected Version(s)
Email Tracker – Email Log, Email Open Tracking, Email Analytics & Email Management for WordPress Emails * <= 5.3.12