The Simple Download Counter plugin for WordPress contains an arbitrary file read vulnerability (CWE-73) in the 'simple_download_counter_download_handler' function. Authenticated attackers with Author-level privileges or higher can exploit this flaw to read any local file on the server, potentially exposing sensitive configuration or system files. This vulnerability affects all versions up to and including 2.0. The CVSS 3.1 score is 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), reflecting network attack vector, low attack complexity, and partial privileges required.

Successful exploitation allows an authenticated user with Author-level or higher privileges to read arbitrary files on the web server. This can lead to disclosure of sensitive information such as database credentials (e.g., wp-config.php) or system files (e.g., /etc/passwd). There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict Author-level access to trusted users only and monitor for suspicious activity related to the Simple Download Counter plugin. Consider disabling or removing the plugin if possible to reduce risk.