description: There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.
problem types: Blind SQL injection in WordPress Plugin Arigato Autoresponder and Newsletter v2.5.1.8
affected:
{
product: Arigato Autoresponder and Newsletter
vendor: Kiboko Labs https://calendarscripts.info/
versions:
lessThanOrEqual: 2.5.1.8, status: affected, version: unspecified, versionType: custom
}