Threats tagged 'ghsa-q7xf-93c3-w2p7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.9	EPSS 0.3%	CVE-2025-10683The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all Medium4.9EPSS 0.3%2025-11-06GCVE DatabaseCVE-2025-10683 The Easy Email Subscription plugin for WordPress contains a SQL Injection vulnerability in the 'uid' parameter affecting all versions up to and including 1.3. This flaw allows authenticated users with Administrator-level privileges or higher to inject additional SQL queries due to insufficient input escaping and query preparation. The vulnerability can be exploited to extract sensitive database information without impacting data integrity or availability. EPSS 0.3%Report on CVE-2025-10683 Vulnerability CWE-89 #ghsa-q7xf-93c3-w2p7	GCVE Database	2025-11-06

Page 1 of 1