plugin

Email Download Link Vulnerabilities

2 known security issues reported for the Email Download Link WordPress plugin. Most recent disclosed Nov 30, 2023.

1 medium

Running Email Download Link on your site? Check whether your installed version is affected.

Scan your site free

Email download link [email-download-link] <= 3.7 (unfixed + closed)

unknown

[en] Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link: from n/a through 3.7.

Affected:
up to 3.7
Fix:
No patched version reported
Disclosed:
Nov 30, 2023

CVE-2023-36523 on NVD →

Email download link <= 3.7 - Unauthenticated Sensitive Information Exposure

medium

The Email download link plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.7. This can allow unauthenticated attackers to extract sensitive data from the database.

CVSS:
6.5
Affected:
up to 3.7
Fix:
No patched version reported
Disclosed:
Jun 27, 2023

CVE-2023-36523 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database