Skip to content
Sign in
9.1 Critical

CVE-2024-8673 The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of…

Description

The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.

Affected products and versions

Product Affected versions Fixed in
Z-Downloads 1.11 earliest → < 1.11.7 1.11.7

Other CVEs of Z-Downloads

The 3 CVEs of Z-Downloads →
CVE-2024-8703 The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in… 6.1 Medium CVE-2024-8699 The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege… 7.2 High
Track this CVE