CVE-2024-8031

The Secure Downloads WordPress plugin versions prior to 1.2.3 is vulnerable to an arbitrary file download flaw. The root cause is the plugin's failure to properly restrict which files can be downloaded by authenticated users. This allows attackers with admin-level access and above to retrieve arb...