WordPress Plugin Vulnerabilities

FileDownload <= 1.4 - Multiple Issues

Description

XSS, Blind SQL Injection and Open Proxy issues

Affects Plugins

Plugin icon
filedownload
No known fix

References

CVE
CVE-2015-1000002
CVE
CVE-2015-1000003
CVE
CVE-2015-1000004
URL
http://www.vapidlabs.com/advisory.php?v=140

Miscellaneous

Verified
No
WPVDB ID
614ea8de-e625-4e45-a41c-f3981e402375

Timeline

Publicly Published
2015-07-11 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2020-06-21
Title
All in One Support Button < 1.8.8 - Authenticated Stored Cross-Site Scripting
Published
2016-07-26
Title
WooCommerce Stock Manager < 1.0.9 - CSRF and Lack of Authorisation
Published
2019-05-13
Title
Ultimate Member < 2.0.46 - Multiple Vulnerabilities
Published
2014-08-01
Title
Sharebar <= 1.2.1 - SQL Injection & Cross Site Scripting
Published
2020-01-27
Title
CarSpot < 2.2.3 - Multiple Vulnerabilities