Download After Email 2.1.5 - 2.1.6 - Unauthorized Repeated Form Submissions

Description

The Download After Email – Subscribe & Download Form Plugin plugin for WordPress is vulnerable to unauthorized repeated form submission in versions 2.1.5 to 2.1.6. This is due to the plugin not properly limiting the number of requests a user can make. This makes it possible for unauthenticated attackers to initiate a download request several times.