📦

secure_downloads

Vendor: wpbookingcalendar

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 0.42% Exploit Prob.
Latest CVE CVE-2024-8031 May 15

Security Vulnerability Index

Page 1 / 1
6.5 CVSS
CVE-2024-8031

The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for authenticated attackers, with admin-level access and above, to download arbitrary files that may contain sensitive information like wp-config.php.

EPSS: 0.42%