Lucene search
+L

23 matches found

NVD
NVD
•added 2026/01/05 11:17 a.m.•10 views

CVE-2025-68850

Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sell Downloads: from n/a through = 1.1.12...

7.5CVSS0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/05 10:43 a.m.•37 views

CVE-2025-68850 WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sell Downloads: from n/a through = 1.1.12...

7.5CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/05 10:43 a.m.•6 views

CVE-2025-68850 WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Codepeople Sell Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sell Downloads: from n/a through 1.1.12...

7.5CVSS6AI score0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/05 10:43 a.m.•33 views

CVE-2025-68850

CVE-2025-68850 describes a Missing Authorization vulnerability in the Sell Downloads plugin for WordPress (Sell Downloads, up to version 1.1.12). The issue, as listed, involves access control/configuration gaps that could permit unauthorized access to the plugin’s features or data. The CVSS 3.1 b...

7.5CVSS6AI score0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•3 views

CVE-2025-68850: Missing Authorization

Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sell Downloads: from n/a through = 1.1.12...

7.5CVSS5.9AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•16 views

PT-2026-1271

Name of the Vulnerable Software and Affected Versions Codepeople Sell Downloads versions through 1.1.12 Description A missing authorization flaw exists in Codepeople Sell Downloads, stemming from incorrectly configured access control security levels. This allows for unauthorized access...

7.5CVSS6.5AI score0.00276EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•14 views

WordPress plugin Sell Downloads 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

7.5CVSS6.4AI score0.00276EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/30 8:05 a.m.•15 views

WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Sell Downloads versions = 1.1.12...

7.5CVSS6.8AI score0.00276EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:14 a.m.•20 views

CVE-2015-9348

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

7.5CVSS7.1AI score0.01734EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/11 12:00 a.m.•8 views

WordPress Sell Downloads Cross-Site Scripting Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Sell Downloads suffers from a cross-site scripting vulnerability that can be...

6AI score
SaveExploits0References1
exploitpack
exploitpack
•added 2019/09/09 12:00 a.m.•20 views

WordPress Plugin Sell Downloads 1.0.86 - Cross-Site Scripting

WordPress Plugin Sell Downloads 1.0.86 - Cross-Site Scripting Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: September 09,2019 Vendor Homepage:...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/09/09 12:00 a.m.•171 views

WordPress Sell Downloads 1.0.86 Cross Site Scripting

Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: September 09,2019 Vendor Homepage: https://wordpress.dwbooster.com/content-tools/sell-downloads Software Link :...

7.4AI score
SaveExploits0
zdt
zdt
•added 2019/09/09 12:00 a.m.•39 views

WordPress Sell Downloads 1.0.86 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: email protected Discovery Date: September 09,2019 Vendor Homepage:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/09/09 12:00 a.m.•253 views

WordPress Plugin Sell Downloads 1.0.86 - Cross-Site Scripting

Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: September 09,2019 Vendor Homepage: https://wordpress.dwbooster.com/content-tools/sell-downloads Software Link :...

5.3AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•14 views

WordPress sell-downloads plugin information disclosure vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sell-downloads is a paid downloadable site builder plugin used in it. A security vulnerability exists in WordPress sell-downloads plug...

7.5CVSS6.5AI score0.01734EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/27 1:15 p.m.•23 views

CVE-2015-9348

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

7.5CVSS7.7AI score0.01734EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/27 1:15 p.m.•23 views

Design/Logic Flaw

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

5CVSS7.2AI score0.01734EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/27 12:21 p.m.•134 views

CVE-2015-9348

CVE-2015-9348 affects the WordPress Sell Downloads plugin prior to version 1.0.8. The vulnerability arises from insufficient restrictions on brute-force guessing of purchase IDs, enabling an attacker to obtain purchase IDs. Multiple connected sources (Red Hat, CNVD, WPVulndb, NVD) corroborate thi...

7.5CVSS7.6AI score0.01734EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/27 12:21 p.m.•30 views

CVE-2015-9348

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

7.6AI score0.01734EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/27 12:00 a.m.•4 views

CVE-2015-9348: Improper Input Validation

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

7.5CVSS5.7AI score0.01734EPSS
SaveExploits0References2
Rows per page
Query Builder