CVE-2025-5034

The wp-file-download WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 6.2.6 . The root cause is the failure to properly sanitize and escape a parameter before it is outputted back onto the page, allowing for the execution of malicious scripts in the user...