| Package | Affected versions | Patched versions |
|---|---|---|
| z-downloads | < 1.11.7 | 1.11.7 |
The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free