CVE-2023-4797 (published 2024-01-16T15:56:40.507Z)
The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended to SQL queries and shell commands, which could enable an administrator to run arbitrary commands on the server.
Affected products: Vendor: Unknown
Product: Newsletters
Versions: 0