CVE-2017-6095

Critical

Published: 21/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability in the /inc/lists/csvexport.php file. This issue affects unauthenticated access using the GET parameter: list_id.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update the Mail Masta plugin to the latest version and implement additional security measures to minimize the risk of SQL injection attacks.

Original NVD description (English source)

A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php (Unauthenticated) with the GET Parameter: list_id.