Security Advisory
CVE-2015-9348
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.