Plugin icon

Download Attachments

download-attachments

Vulnerabilities:

4

Last Updated:

March 24, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-02-10
Title
Download Attachments <= 1.4.0 - Unauthenticated Insecure Direct Object Reference
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2025-06-19
Title
Download Attachments < 1.3.2 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 1.3.2
CVSS
5.3 (medium)
Published
2024-06-03
Title
Download Attachments < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.1
CVSS
6.4 (medium)
Published
2023-02-13
Title
Download Attachments < 1.3 - Contributor+ Stored XSS
Fixed in
Fixed in 1.3
CVSS
6.8 (medium)