TI-2014-08267 CVE-2014-100003 · GHSA-wg27-r6r2-wvxgSQL injection vulnerability in includes/ym-download_functions.include.php in the Code…Priority MEDIUM 40SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ym_download_id parameter to…CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04234 · Published 2015-01-13 · No fix listed CWE-89