WordPress Plugin Vulnerabilities

Sell Downloads < 1.0.8 - Insufficient Restrictions when Brute-Force Purchase IDs

Description

The Sell Downloads WordPress plugin was affected by an Insufficient Restrictions when Brute-Force Purchase IDs security vulnerability.

Affects Plugins

Plugin icon
sell-downloads
Fixed in 1.0.8

References

CVE
CVE-2015-9348

Miscellaneous

Verified
No
WPVDB ID
387f630f-b744-44e1-ab42-6366d0e04021

Timeline

Publicly Published
2015-07-10 (about 10 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-01-17
Title
Store Locator Plus 4.2.23 - Email Injection
Published
2014-08-01
Title
Construct 1.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Published
2014-08-01
Title
SCv1 - download.php file Parameter Traversal Remote File Access
Published
2019-09-02
Title
Event Tickets <= 4.10.7.1 - CSV Injection
Published
2025-02-14
Title
Bit Assist < 1.5.3 - Subscriber+ Arbitrary File Read via fileID Parameter