wp-file-download
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions | wp-file-download | WordPress | High | Fix reported | |
| WP File Download <= 6.3.6 - Unauthenticated Stored Cross-Site Scripting | wp-file-download | WordPress | High | No fix reported | |
| WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter | wp-file-download | WordPress | Medium | Fix reported | |
| WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter | wp-file-download | WordPress | High | Fix reported | |
| WP File Download <= 6.2.5 - Reflected Cross-Site Scripting | wp-file-download | WordPress | Medium | Fix reported |