CVE-2024-8031 — Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download

CVE-2024-8031

Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download PUBLISHED

Description (CNA)

The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for authenticated attackers, with admin-level access and above, to download arbitrary files that may contain sensitive information like wp-config.php.

Affected (CNA)

Vendor / product	Versions
Unknown / Secure Downloads	affected 0 before 1.2.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c6f54e6f-0a50-424f-ae3a-00b9880d9f13/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.