CVE-2009-0593: Plxwebdev Plx Auto Reminder

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action.

Affected products

• Plxwebdev Plx Auto Reminder: version 3.7 only

Published 2009-02-16. Last modified 2026-06-16.