Beveiligingsadvies

CVE-2025-2048

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-01 06:00:05

Laatst bijgewerkt 2025-04-01 14:58:56

Toegewezen door WPScan

CVSS-score 4.1

Status PUBLISHED

Beschrijving

The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server

← Alle CVE's bekijken Bekijk op cve.org ↗