WordPress Plugin Vulnerabilities

Delightful Downloads 1.3.1.1 - meta-boxes.php dedo_meta_boxes_save Function Multiple Action Authorization Bypass

Description

The Delightful Downloads WordPress plugin was affected by a meta-boxes.php dedo_meta_boxes_save Function Multiple Action Authorization Bypass security vulnerability.

Affects Plugins

Plugin icon
delightful-downloads
Fixed in 1.3.2

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
219a6073-540d-42f4-b955-494b98d1862e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-07-10
Title
profile-builder < 3.11.9 - Unauthenticated Privilege Escalation
Published
2025-09-29
Title
LatePoint < 5.2.0 - Unauthenticated Authentication Bypass
Published
2016-07-03
Title
Advanced Ajax Page Loader < 2.7.7 - Unauthenticated Uploaded File Disclosure
Published
2019-08-12
Title
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
Published
2026-01-28
Title
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation