| Package | Affected versions | Patched versions |
|---|---|---|
| sell downloads | < 1.0.8 | 1.0.8 |
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free