Threats tagged 'ghsa-49q4-53vc-m8p9'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2025-11072The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be Medium5.3EPSS 0.3%2025-11-05GCVE DatabaseCVE-2025-11072 The MelAbu WP Download Counter Button WordPress plugin up to version 1.8.6.7 contains a vulnerability where it does not properly validate file paths for downloads. This flaw allows unauthenticated attackers to read or download arbitrary files from the server. EPSS 0.3%Report on CVE-2025-11072 Vulnerability #ghsa-49q4-53vc-m8p9	GCVE Database	2025-11-05

Page 1 of 1