CVE-2015-7517

CRÍTICO 9.8CVE-2015-7517 · Published 29/08/2017 · updated 17/06/2026

En resumen

CVE-2015-7517 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a double opt-in for download (labwebdesigns).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.2%, mayor que el 91.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
double opt-in for download labwebdesigns	`≤ 2.0.8`	No fix yet

Description

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to (1) class-doifd-download.php or (2) class-doifd-landing-page.php in public/includes/.

References

permalink.gmane.org/gmane.comp.security.oss.general/18255 · Third Party Advisory
securityfocus.com/bid/78220 · Third Party Advisory
vapidlabs.com/advisory.php · Third Party Advisory
wpvulndb.com/vulnerabilities/8345 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free