WordPress Media Library Downloader plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Media Library Downloader versions = 1.4.0...

EUVD-2014-1258

Malware in sbrugna...

CVE-2014-125090

A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vulnerability affects the function dlfileresumable of the file getfile.php. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotel...

CVE-2024-13435

The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2024-13435

The CVE-2024-13435 case concerns the Ebook Downloader WordPress plugin. The vulnerability is an unauthenticated SQL Injection in the download parameter, affecting all versions up to 1.0, caused by insufficient escaping of user input and a poorly prepared SQL query. Exploitation could allow an att...

WordPress plugin Ebook Downloader SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin APK Downloade 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

Cross site scripting

A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vulnerability affects the function dlfileresumable of the file getfile.php. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotel...

CVE-2014-125090

The CVE-2014-125090 entry concerns the WordPress Media Downloader Plugin (version 0.1.992) and its getfile.php function, specifically dl_file_resumable. The vulnerability arises from manipulating the file parameter, enabling cross-site scripting. Exploitation can be carried out remotely, and upgr...

CVE-2014-125090 Media Downloader Plugin getfile.php dl_file_resumable cross site scripting

A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vulnerability affects the function dlfileresumable of the file getfile.php. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotel...

PT-2023-10158 · Unknown · Media Downloader Plugin

Name of the Vulnerable Software and Affected Versions: Media Downloader Plugin version 0.1.992 Description: A vulnerability was found in the Media Downloader Plugin, affecting the dl file resumable function of the getfile.php file. The manipulation of the file argument leads to cross-site...

CVE-2022-2357

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php...

WordPress WSM Downloader plugin <= 1.4.0 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability discovered by Raad Haddad in WordPress WSM Downloader plugin versions = 1.4.0. Solution Deactivate and delete. This plugin has been closed as of July 8, 2022 and is not available for download. This closure is temporary, pending a full review...

WordPress Ebook Download Plugin Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...