| Package | Affected versions | Patched versions |
|---|---|---|
| lana downloads manager | < 1.10.0 | 1.10.0 |
The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free