CVE-2023-36523 – WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure

https://notcve.org/view.php?id=CVE-2023-36523

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link: from n/a through 3.7. Exposición de información confidencial a una vulnerabilidad de actor no autorizado en el enlace de descarga del correo electrónico de Gopi Ramasamy. Este problema afecta el enlace de descarga del correo electrónico: desde n/a hasta 3.7. The Email download link plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.7. This can allow unauthenticated attackers to extract sensitive data from the database. • https://patchstack.com/database/vulnerability/email-download-link/wordpress-email-download-link-plugin-3-7-sensitive-data-exposure?_s_id=cve • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •