CVE-2025-2048 — Lana Downloads Manager < 1.10.0 - Admin+ Arbitrary File Download via Path Traversal

CVE-2025-2048

Lana Downloads Manager < 1.10.0 - Admin+ Arbitrary File Download via Path Traversal PUBLISHED

Description (CNA)

The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server

Affected (CNA)

Vendor / product	Versions
Unknown / Lana Downloads Manager	affected 0 before 1.10.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/05c664e8-110e-4a31-8377-41a0422508a7/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.