WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval Detection

WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the requested file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the.""" import re...

PT-2025-42311

Name of the Vulnerable Software and Affected Versions WordPress Zip Attachments plugin versions up to and including 1.6 Description The Zip Attachments plugin for WordPress has a flaw that allows unauthorized access to data. This is due to a missing capability check and a lack of post status...

PT-2025-42310

Name of the Vulnerable Software and Affected Versions WordPress Zip Attachments plugin versions up to and including 1.6 Description The Zip Attachments plugin for WordPress has a flaw that allows unauthorized data loss. Specifically, a missing authorization and capability check in the download.ph...