CVE-2018-1002000

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and Newsletter version 2.5.1.8

Description: The issue is related to a blind SQL injection vulnerability that can be exploited via the del ids variable by sending a POST request. This vulnerability requires administrative privileges to exploit.

Recommendations: For WordPress Arigato Autoresponder and Newsletter version 2.5.1.8, consider restricting access to the del ids variable to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the del ids variable in POST requests to prevent potential SQL injection attacks.