Back to Database
Status published
High
CVE-2018-1002000
There is blind SQL injection in WordPress Arigato Autoresponder and...
Vulnerability Description
There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1002000
Credits & Attribution
No credits recorded in the NVD database.
References
More from Kiboko Labs https://calendarscripts.info/
View All →CVE-2018-1002009
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder...
Medium
4.8
CVE-2018-1002008
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder...
Medium
4.8
CVE-2018-1002007
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder...
Medium
4.8
CVE-2018-1002006
These vulnerabilities require administrative privileges to exploit. There is an...
Medium
4.8
CVE-2018-1002005
These vulnerabilities require administrative privileges to exploit. There is an...
Medium
4.8
Affected Vendor
Kiboko Labs https://calendarscripts.info/
View all reports →Affected Software
Arigato Autoresponder and Newsletter
Vulnerable Versions:
unspecified
Timeline
Official Publish:
December 3rd, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.