Mandsconsulting

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mandsconsulting records in CISA KEV

No Mandsconsulting vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Email Before Download 2 records MEDIUM

Records

2 records

TI-2021-07030 CVE-2021-24748 · GHSA-gfh7-x68m-493m

Email Before Download < 6.8 - Admin+ SQL Injection

MEDIUM 41

The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01361 Published 2021-11-29 Fixed in 6.8 CWE-89

TI-2024-15560 CVE-2024-23519 · GHSA-5cm2-xfwq-cj8j

WordPress Email Before Download Plugin <= 6.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in M&S Consulting Email Before Download.This issue affects Email Before Download: from n/a through 6.9.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00277 Published 2024-02-28 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0