Sell Downloads
Monthly
Trusted-credential abuse in CodePeople2 Sell Downloads (WordPress plugin) up to version 1.2.3 allows unauthenticated remote attackers to bypass origin verification and access or modify limited data, such as download or order metadata. The flaw, tracked as CVE-2026-94590, has a CVSS score of 6.5 and is not known to be actively exploited; no public exploit code has been identified. Only WordPress sites with this specific, low-prevalence plugin active are affected, making the real-world risk moderate and low-priority.
Trusted-credential abuse in CodePeople2 Sell Downloads (WordPress plugin) up to version 1.2.3 allows unauthenticated remote attackers to bypass origin verification and access or modify limited data, such as download or order metadata. The flaw, tracked as CVE-2026-94590, has a CVSS score of 6.5 and is not known to be actively exploited; no public exploit code has been identified. Only WordPress sites with this specific, low-prevalence plugin active are affected, making the real-world risk moderate and low-priority.