CVE-2018-1002000

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit

published December 3, 2018

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04354 · 91.1th percentile
Published
2018-12-03T16:00Z
EPSS history
Timeline
  • 03 DEC 16:00Z
    There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit
    cvelistv5