Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:email_before_download:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductEmail Before Download (c3d50e4f-fd0a-58db-9b12-10c57d32668d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24748 vulnerable 2026-06-08 05:30:39.132980 Email Before Download < 6.8 - Admin+ SQL Injection
The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues
Published: 2021-11-29T08:25:31.000Z
Updated: 2024-08-03T19:42:16.642Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.