Wpbookingcalendar Secure Downloads vulnerabilities

1 vulnerability

Known vulnerabilities in Wpbookingcalendar Secure Downloads, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5MediumCVE-2024-8031unknown · secure downloads +2 moreSecure Downloads < 1.2.3 - Admin+ Arbitrary File DownloadThe Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for authenticated attackers, with admin-level access and above, to download arbitrary files that may contain sensitive information like wp-config.php.EPSS0.53%