TI-2024-12476 CVE-2024-13435 · GHSA-64mh-jr3g-39x7Ebook Downloader <= 1.0 - Unauthenticated SQL InjectionPriority LOW 39The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of suff…CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-02-12 · No fix listed CWE-89