4 matches found
WordPress sell-downloads plugin information disclosure vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sell-downloads is a paid downloadable site builder plugin used in it. A security vulnerability exists in WordPress sell-downloads plug...
7.5CVSS6.5AI score0.01734EPSS
SaveExploits0References1
CVE-2015-9348
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...
7.5CVSS7.7AI score0.01734EPSS
SaveExploits0References1
20