Filedownload

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-1000004 Oct 06, 14:59 MEDIUM POC This Month

XSS in filedownload v1.4 wordpress plugin. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Filedownload Filedownload Project

NVD

CVSS 3.0

6.1

EPSS

1.2%

CVE-2015-1000003 Oct 06, 14:59 CRITICAL POC Act Now

Blind SQL Injection in filedownload v1.4 wordpress plugin. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Filedownload Filedownload Project

NVD

CVSS 3.0

9.8

EPSS

6.0%

CVE-2015-1000002 Oct 06, 14:59 HIGH POC This Week

Open Proxy in filedownload v1.4 wordpress plugin. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Filedownload Filedownload Project

NVD

CVSS 3.0

8.2

EPSS

3.1%

CVE-2015-1000004

EPSS 1% CVSS 6.1

MEDIUM POC This Month

WordPress XSS Filedownload +1

NVD

CVE-2015-1000003

EPSS 6% CVSS 9.8

CRITICAL POC Act Now

WordPress SQLi Filedownload +1

NVD

CVE-2015-1000002

EPSS 3% CVSS 8.2

HIGH POC This Week

WordPress Information Disclosure Filedownload +1

NVD