CVE-2025-11072: CVE-2025-11072: güvenlik açığı

Açıklama (NVD)

The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files.

Özet bilgiler

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,35 (yüzdelik 29)

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com