Beveiligingsadvies

CVE-2025-11072

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-05 06:00:07
Laatst bijgewerkt 2026-04-02 12:39:51
Toegewezen door WPScan
CVSS-score 5.3
Status PUBLISHED

Beschrijving

The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files.