Plugin icon

Download Plugin

download-plugin

Vulnerabilities:

5

Last Updated:

April 29, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-07-03
Title
Download Plugin < 2.2.9 - Authenticated (Administrator+) Arbitrary File Upload
Fixed in
Fixed in 2.2.9
CVSS
7.2 (high)
Published
2024-10-22
Title
Download Plugin < 2.2.1 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download
Fixed in
Fixed in 2.2.1
CVSS
6.5 (medium)
Published
2023-05-24
Title
Download < 2.0.5 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.0.5
CVSS
4.3 (medium)
Published
2021-11-11
Title
Download Plugin < 2.0.0 - Subscriber+ Website Download
Fixed in
Fixed in 2.0.0
CVSS
7.7 (high)
Published
2021-10-19
Title
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
Fixed in
Fixed in 1.6.1
CVSS
4.3 (medium)