← Database

CVE-2008-4625

HIGH CVSS: 7.5 Published: 2008-10-21 Modified: 2026-06-16

Description

SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683.

Affected Platforms

Shiftthis Shifthis NewsletterWordpress Wordpress

Weakness Type

CWE-89

References