A vulnerability allowing an attacker to inject SQL statements through the subscriber input field in Mooberry Book Manager plugin 4.16.2. This is a classic input validation weakness identified as CWE-89, permitting unauthorized manipulation of database queries, potentially exposing confidential data or allowing modification of records.

The vulnerability affects the Mooberry Book Manager plugin (mooberrydreams:Mooberry Book Manager) version 4.16.2 for WordPress. No other versions or products are listed as affected.

With a CVSS score of 7.1 the issue is categorized as high severity, and with an EPSS score of 0.00274, the potential for exploitation remains significant in environments where the subscriber form is publicly accessible. The vulnerability is currently not listed in the CISA KEV catalog. Attackers can likely exploit this flaw remotely by submitting crafted input to the subscriber endpoint, gaining unauthorized database access.