CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP Reroute Email allows SQL Injection.This issue affects WP Reroute Email: from n/a through 1.4.6.
Explanation of Vulnerability in Simple Terms
WP Reroute Email versions up to 1.4.6 contain a SQL injection vulnerability in database queries. An authenticated administrator can craft malicious input to read or modify database contents. The vulnerability requires high-level admin access and does not affect site availability significantly, but allows unauthorized data access.
What an attacker can do
Read or modify database records via SQL injection in plugin queries.
Potential impact on your site
A compromised admin account could expose sensitive database data or alter email routing settings.
Conditions required to exploit
Attacker must have WordPress administrator privileges.
Key dates
External resources
Related vulnerabilities
