Skip to content

Product

werdswords download shortcode vulnerabilities

1 published CVE affecting werdswords download shortcode, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest werdswords download shortcode CVEs

Newest publication first

  1. CVE-2014-5465 Download Shortcode <= 0.2.3 - Directory Traversal

    Published
    MediumCVSS 5.0 EPSS 13.5% Public exploit

    Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.