CVE-2025-3107 | Newsletters Plugin up to 4.9.9.8 on WordPress orderby sql injection

A vulnerability was found in Newsletters Plugin up to 4.9.9.8 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation of the argument orderby leads to sql injection.

This vulnerability was named CVE-2025-3107. The attack can be initiated remotely. There is no exploit available.