CVE-2025-14633

creationtimestamp| type| source ---|---|--- 2025-12-20 07:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mafoobmhws2c 2025-12-20 10:56:15+00:00| seen| https://gist.github.com/Darkcrai86/7562e9634017dbe817723a63c84dbb91...

CVE-2025-14633 F70 Lead Document Download <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Media File Download

The F70 Lead Document Download plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'filedownload' function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to download any file from the WordPre...