Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Double Opt-In for Download Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Double Opt-In for Download, published between 2015 and 2016.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

2Total records
1Critical
1High
0Medium
0Low
0Informational
2Patched records
0Currently marked unpatched
2015-11-24First disclosure
2016-06-06Latest disclosure
1 of 2CVE coverage

Use this history

Check and watch Double Opt-In for Download.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Year-by-Year Timeline

YearRecordsRelative volume
201511 records
201611 records

Severity Breakdown

SeverityRecordsShare
Critical150%
High150%

Vulnerability-Type Breakdown

SQL Injection

2 records100%

First: 2015. Latest: 2016.

Patch Status

Patched
2
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.1.0
  • 2.0.9

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
[*, 2.1.0)Double Opt-In for Download <= 2.0.9 - SQL InjectionJune 6, 20162.1.0High
[*, 2.0.9)Double Opt-In for Download <= 2.0.8 - SQL InjectionNovember 24, 20152.0.9Critical

Selected source records

Latest Records

High

Double Opt-In for Download <= 2.0.9 - SQL Injection

Published: June 6, 2016

Affected versions
[*, 2.1.0)
Patched versions
2.1.0
Original Wordfence record
CriticalCVE-2015-7517

Double Opt-In for Download <= 2.0.8 - SQL Injection

Published: November 24, 2015

Affected versions
[*, 2.0.9)
Patched versions
2.0.9
Original Wordfence record

Highest-Severity Records

CriticalCVE-2015-7517

Double Opt-In for Download <= 2.0.8 - SQL Injection

Published: November 24, 2015

Affected versions
[*, 2.0.9)
Patched versions
2.0.9
Original Wordfence record
High

Double Opt-In for Download <= 2.0.9 - SQL Injection

Published: June 6, 2016

Affected versions
[*, 2.1.0)
Patched versions
2.1.0
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory