cbcvebase.

Halfdata Opt-In Downloads vulnerabilities

1 known vulnerability affecting halfdata/opt-in_downloads.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-10590P2HIGHCVSS 8.8≤ 4.072024-12-12
CVE-2024-10590 [HIGH] CWE-434 CVE-2024-10590: The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may ma
nvd
Halfdata Opt-In Downloads vulnerabilities | cvebase