CVE-2015-7517

CRITICO 9.8CVE-2015-7517 · Published 29/08/2017 · updated 17/06/2026

In breve

CVE-2015-7517 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda double opt-in for download (labwebdesigns).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.2%, superiore al 91.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
double opt-in for download labwebdesigns	`≤ 2.0.8`	No fix yet

Description

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to (1) class-doifd-download.php or (2) class-doifd-landing-page.php in public/includes/.

References

permalink.gmane.org/gmane.comp.security.oss.general/18255 · Third Party Advisory
securityfocus.com/bid/78220 · Third Party Advisory
vapidlabs.com/advisory.php · Third Party Advisory
wpvulndb.com/vulnerabilities/8345 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free