Known vulnerabilities in dFactory Download Attachments
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-39616 | Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments… | 5.3 Medium | Apr 8, 2026 |
| CVE-2025-49995 | Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments… | 5.3 Medium | Jun 20, 2025 |
| CVE-2024-3230 | The Download Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… | 6.4 Medium | Jun 4, 2024 |