Filedownload

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-1000004 MEDIUM POC This Month

XSS in filedownload v1.4 wordpress plugin. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS WordPress Filedownload

NVD

CVSS 3.0

6.1

EPSS

1.2%

CVE-2015-1000003 CRITICAL POC Act Now

Blind SQL Injection in filedownload v1.4 wordpress plugin. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Filedownload

NVD

CVSS 3.0

9.8

EPSS

6.0%

CVE-2015-1000002 HIGH POC This Week

Open Proxy in filedownload v1.4 wordpress plugin. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Filedownload

NVD

CVSS 3.0

8.2

EPSS

3.1%

CVE-2015-1000004

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS WordPress Filedownload

NVD

CVE-2015-1000003

EPSS 6% CVSS 9.8

CRITICAL POC Act Now

WordPress SQLi Filedownload

NVD

CVE-2015-1000002

EPSS 3% CVSS 8.2

HIGH POC This Week

WordPress Information Disclosure Filedownload

NVD