CVE-2023-22734

CVE-2023-22734 concerns an improper validation of the newsletter double opt-in in Shopware. The vulnerability arises from the newsletter route not correctly enforcing double opt-in, potentially causing inconsistencies in newsletter systems. Documents indicate the issue has been fixed in version 6...

CVE-2015-7517

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...

CVE-2015-7517

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...

CVE-2015-7517

CVE-2015-7517 affects the WordPress plugin Double Opt-In for Download (public/includes/ files) with SQL injection via the ver parameter in class-doifd-download.php and class-doifd-landing-page.php. Affected versions are prior to 2.0.9. Root cause is improper handling of user-supplied ver data ena...

Wordpress plugin double-opt-in-for-download has multiple cross-site scripting vulnerabilities

double-opt-in-for-download is a Wordpress plugin that is used to capture the name and email address of visitors by offering a free download to the user's visitors in exchange for their email address with the Double Opt-In plugin! Wordpress plugin double-opt-in-for-download has an xss vulnerabilit...

WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection

Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...

WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection

WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

WordPress Double Opt-In for Download Plugin 2.0.9 - SQL Injection

This WordPress Double Opt-In for Download plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Double Opt-In For Download 2.0.9 SQL Injection

Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...

WordPress Double-Opt-in-for-Download插件SQL注入漏洞

No description provided by source...

WordPress G-Lock Double Opt-in Manager Plugin - Multiple Vulnerabilities

This plugin is prone to security bypass vulnerabilities. Solution Update the plugin...

WordPress G-Lock Double Opt-in Manager 2.6.2 SQL Injection

============================================================================ WordPress G-Lock Double Opt-in Manager Plugin SQL Injection version the admin-ajax will run the ajaxbackend eventually, and then all subscribers will be deleted, even though u r only a subscriber user!!!...

WordPress Plugin G-Lock Double Opt-in Manager - SQL Injection

source: https://www.securityfocus.com/bid/54767/info G-Lock Double Opt-in Manager plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Click&Email - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...