CVE-2021-24748

CVE-2021-24748: Email Before Download < 6.8 - Admin+ SQL Injection

Vendor Unknown
Product Email Before Download
Weakness CWE-89 · SQLi
Published November 29, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues

Key dates

02Disclosure timeline

November 29, 2021 CVE published
August 3, 2024 Record updated