CVE-2008-0683

Wordpress ST Newsletter Plugin - SQL Injection

Title source: rule

Description

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by S@BUN · textwebappsphp
https://www.exploit-db.com/exploits/5053

Scores

EPSS 0.0061
EPSS Percentile 69.3%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

wordpress/st_newsletter_plugin

Timeline

Published Feb 12, 2008
Tracked Since Feb 18, 2026