cbcvebase.

Werdswords Download Shortcode vulnerabilities

1 known vulnerability affecting werdswords/download_shortcode.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2014-5465P3MEDIUMCVSS 5.0PoC≤ 0.2.3v0.1+2 more2014-09-03
CVE-2014-5465 [MEDIUM] CWE-22 CVE-2014-5465: Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and e Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
nvd
Werdswords Download Shortcode vulnerabilities | cvebase