CVE-2021-24748

Name of the Vulnerable Software and Affected Versions: The Email Before Download WordPress plugin versions prior to 6.8

Description: The issue arises from the improper validation and escaping of the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues.

Recommendations: For versions prior to 6.8, update to version 6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected API endpoints that utilize the order and orderby parameters until a patch is available. Avoid using the order and orderby parameters in affected SQL statements until the issue is resolved.