Medium · 4.3 CVE-2024-23519 EUVD-2024-21014GHSA-5cm2-xfwq-cj8j

WordPress Email Before Download Plugin <= 6.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: M&S Consulting Product: Email Before Download

Description

Cross-Site Request Forgery (CSRF) vulnerability in M&S Consulting Email Before Download.This issue affects Email Before Download: from n/a through 6.9.7.

Affected products

Vendor	Product	Affected	Fixed
M&S Consulting	Email Before Download	≤ 6.9.7	—

References

https://patchstack.com/database/vulnerability/email-before-download/wordpress-email-before-download-plugin-6-9-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry