Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Infoway LLC Clear all filters
TI-2025-23041 CVE-2025-31904 · GHSA-fw2v-8868-mpvm

WordPress Ebook Downloader plugin <= 1.0 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Infoway LLC Ebook Downloader ebook-downloader allows Cross Site Request Forgery.This issue affects Ebook Downloader: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2025-04-01 No fix listed CWE-352
TI-2025-23031 CVE-2025-31894 · GHSA-rh2r-j62v-h8x5

WordPress Ebook Downloader plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infoway LLC Ebook Downloader ebook-downloader allows Stored XSS.This issue affects Ebook Downloader: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-01 No fix listed CWE-79
TI-2024-12476 CVE-2024-13435 · GHSA-64mh-jr3g-39x7

Ebook Downloader <= 1.0 - Unauthenticated SQL Injection

Priority LOW 39

The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of suff…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-12 No fix listed CWE-89