Vulnerability · Published Jul 17, 2020 · Assigned by tenable
CVE-2020-5768
Medium 4.9
In plain English
A medium-severity security flaw in Icegram Email Subscribers & Newsletters Plugin for WordPress. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 80% of all known vulnerabilities).
Severity (CVSS NVD)4.9Medium
Exploit odds (30 days)2.0%top 19.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Icegram Email Subscribers & Newsletters Plugin for WordPress | 4.4.8 |
References
- https://www.tenable.com/security/research/tra-2020-44-0 x_refsource_CONFIRM