Unauthenticated SQL Injection (SQLi) vulnerability discovered in [GWA] AutoResponder WordPress plugin (versions <= 2.3), vulnerable at (&listid). No patched version available, plugin closed.
References
Link | Resource |
---|---|
https://patchstack.com/database/vulnerability/gwa-autoresponder/wordpress-gwa-autoresponder-plugin-2-3-unauthenticated-sql-injection-sqli-vulnerability | Third Party Advisory |
https://wordpress.org/plugins/gwa-autoresponder/ | Product Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2022-02-04 23:15
Updated : 2024-02-28 18:48
NVD link : CVE-2021-44779
Mitre link : CVE-2021-44779
CVE.ORG link : CVE-2021-44779
JSON object : View
Products Affected
\[gwa\]_autoresponder_project
- \[gwa\]_autoresponder
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')