Input validation vulnerability in Email Before Download 4.0

The Email Before Download plugin for WordPress is vulnerable to a type of attack called generic SQL Injection in versions up to and including 3.6. This means that the plugin does not properly secure user-supplied parameters or prepare existing SQL queries, which makes it possible for attackers to add extra queries to the existing ones. These additional queries can be used to access sensitive information from the database.

Detected in:

Email Before Download fixed vulnerable versions: >= * < 4.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.