filedownload project vulnerabilities

Products

• filedownload 3

Latest filedownload project CVEs

Newest publication first

1. CVE-2015-1000004 filedownload plugin <= 1.4 - Cross-Site Scripting

   Published 2016-10-06

   Medium·CVSS 6.1 EPSS 1.4%

   XSS in filedownload v1.4 wordpress plugin

2. CVE-2015-1000002 File Download <= 1.4 - Open Proxy

   Published 2016-10-06

   High·CVSS 8.2 EPSS 1.8%

   Open Proxy in filedownload v1.4 wordpress plugin

3. CVE-2015-1000003 filedownload < 1.4 - Blind SQL Injection

   Published 2016-10-06

   Critical·CVSS 9.8 EPSS 2.6%

   Blind SQL Injection in filedownload v1.4 wordpress plugin

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.