CVE-2024-23519

CVE-2024-23519 is a CSRF vulnerability in the WordPress plugin Email Before Download (M&S Consulting) affecting versions up to 6.9.7. The NVD/patch sources indicate a high-impact issue (CVSS v3.1 base score 8.8; network attack vector, no privileges required, user interaction required) that could ...

CVE-2021-24748

CVE-2021-24748 affects the Email Before Download WordPress plugin prior to version 6.8. The vulnerability arises from improper validation/escaping of order and orderby GET parameters used in SQL statements, causing authenticated SQL injection. Impact per sources includes high-severity exposure (C...