Read the docs

Infoway LLC

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Infoway LLC records in CISA KEV

No Infoway LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ebook Downloader 1 record LOW Social Photo Gallery 1 record LOW

Records

4 records

TI-2024-12476 CVE-2024-13435 · GHSA-64mh-jr3g-39x7

Ebook Downloader <= 1.0 - Unauthenticated SQL Injection

Priority LOW 39

The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of suff…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-12 No fix listed CWE-89
TI-2025-23041 CVE-2025-31904 · GHSA-fw2v-8868-mpvm

WordPress Ebook Downloader plugin <= 1.0 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Infoway LLC Ebook Downloader ebook-downloader allows Cross Site Request Forgery.This issue affects Ebook Downloader: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2025-04-01 No fix listed CWE-352
TI-2025-23031 CVE-2025-31894 · GHSA-rh2r-j62v-h8x5

WordPress Ebook Downloader plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infoway LLC Ebook Downloader ebook-downloader allows Stored XSS.This issue affects Ebook Downloader: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-01 No fix listed CWE-79
Open these records in search →