Lana Downloads Manager Security Vulnerabilities and Issues — Lana Downloads Manager CVE List

Lucene search

LanaLana Downloads Manager

2 matches found

CVE•added 2025/04/01 6:15 a.m.•38 views

CVE-2025-2048

The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server

4.1CVSS6.6AI score0.00068EPSS

CVE•added 2022/08/22 3:15 p.m.•29 views

CVE-2022-2392

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

6.5CVSS6.5AI score0.00165EPSS