WordPress Plugin Filedownload is prone to a local file disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability could allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application; this may aid in further attacks. WordPress Plugin Filedownload version 0.1 is vulnerable.


Update to plugin version 0.2 or latest


Related Vulnerabilities