CVE-2015-9496

The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring

published October 22, 2019

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02172 · 82.0th percentile
Published
2019-10-22T20:27Z
EPSS history
Timeline
  • 22 OCT 20:27Z
    The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring
    cvelistv5