| Package | Affected versions | Patched versions |
|---|---|---|
| secure downloads | < 1.2.3 | 1.2.3 |
The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for authenticated attackers, with admin-level access and above, to download arbitrary files that may contain sensitive information like wp-config.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free