Skip to content
Sign in
7.2 High

CVE-2024-8699 The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege…

Description

The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Affected products and versions

Product Affected versions Fixed in
Z-Downloads 1.11 earliest → < 1.11.5 1.11.5

Other CVEs of Z-Downloads

The 3 CVEs of Z-Downloads →
CVE-2024-8703 The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in… 6.1 Medium CVE-2024-8673 The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of… 9.1 Critical
Track this CVE