{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-14T17:46:22.632","vulnerabilities":[{"cve":{"id":"CVE-2025-24587","sourceIdentifier":"audit@patchstack.com","published":"2025-01-24T18:15:35.697","lastModified":"2026-04-01T15:16:25.287","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n\/a through <= 1.2.23."},{"lang":"es","value":"Vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL ('Inyección SQL') en I Thirteen Web Solution Email Subscription Popup que permite la inyección Blind SQL. Este problema afecta a la ventana emergente de suscripción por correo electrónico: desde n\/a hasta 1.2.23."}],"metrics":{},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https:\/\/patchstack.com\/database\/Wordpress\/Plugin\/email-subscribe\/vulnerability\/wordpress-email-subscription-popup-plugin-1-2-23-sql-injection-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}}]}