CVE-2024-8031 — Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download
The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for authenticated attackers, wi…
Published: 2025-05-15 · CVSS: 6.5 · CVSS 3.1
The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for authenticated attackers, with admin-level access and above, to download arbitrary files that may contain sensitive information like wp-config.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7