WordPress Plugin Vulnerabilities

Filedownload 0.1 - (download.php) Remote File Disclosure

Description

The filedownload WordPress plugin was affected by a (download.php) Remote File Disclosure security vulnerability.

Affects Plugins

Plugin icon
filedownload
No known fix

References

Exploitdb
17858

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
c460a0b0-a61a-479f-a693-198bdbdff695

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-04-20
Title
wpForo Forum < 3.0.6 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
Published
2024-11-12
Title
WordPress User Extra Fields < 16.7 - Unauthenticated Arbitrary File Deletion
Published
2026-03-12
Title
Energox < 1.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Published
2024-01-19
Title
Photo Gallery by 10Web - Mobile-Friendly Image Gallery < 1.8.20 - Directory Traversal to Arbitrary File Rename
Published
2017-02-10
Title
Javo Spot Premium Theme - Unauthenticated Directory Traversal