Tribulant Software Newsletters Plugin SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Tribulant Software Newsletters plugin for WordPress, affecting versions through 4.9.9.7. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially enabling attackers to manipulate database queries and interact directly with the database.

Impact

Exploitation of this vulnerability allows for SQL injection, which could enable a malicious actor to interact with the database in unauthorized ways, such as extracting sensitive information.

Remediation

Users of the Tribulant Software Newsletters plugin should update to version 4.9.9.8 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.