high7.6

CVE-2024-52436

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection…

Impact

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects Post SMTP: from n/a through <= 2.9.9.

Affected products

Vendor	Product	Affected versions
Wpexperts	Post Smtp	through 2.9.9

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/post-smtp/vulnerability/wordpress-post-smtp-plugin-2-9-9-sql-injection-vulnerability?_s_id=cve