CVE Catalog
CVE-2015-7517
CriticalSummary
The Double Opt-In for Download plugin before version 2.0.9 for WordPress contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the ver parameter in class-doifd-download.php or class-doifd-landing-page.php.
Risk Assessment
Attackers may gain access to the database, potentially leading to data theft or system compromise.
Recommendation
It is recommended to update the plugin to version 2.0.9 or later to mitigate these vulnerabilities.
Original NVD description (English source)
Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to (1) class-doifd-download.php or (2) class-doifd-landing-page.php in public/includes/.