CVE-2024-13618

HIGH 7.2CVE-2024-13618 · Published 25/03/2025 · updated 17/06/2026

In short

CVE-2024-13618 is a HIGH (CVSS 7.2) vulnerability affecting downloadable by american osteopathic association (osteopathic).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
downloadable by american osteopathic association osteopathic	`≤ 0.1.0`	No fix yet

Description

The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.

References

wpscan.com/vulnerability/d6a78233-3f23-4da4-9bc0-1439cde20a30 · Exploit

More vulnerabilities in downloadable by american osteopathic association

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free