Sender Newsletter Sms And Email Marketing Automation For Woocommerce
Monthly
An authenticated SQL injection flaw in the Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin (≤2.10.22) allows administrators to execute arbitrary SQL queries, potentially exposing sensitive database content. The vulnerability arises from improper input neutralization (CWE-89) and, while requiring high privileges, enables reading of the entire WordPress database due to a scope change. No public exploit or active exploitation has been reported.
An authenticated SQL injection flaw in the Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin (≤2.10.22) allows administrators to execute arbitrary SQL queries, potentially exposing sensitive database content. The vulnerability arises from improper input neutralization (CWE-89) and, while requiring high privileges, enables reading of the entire WordPress database due to a scope change. No public exploit or active exploitation has been reported.