5.3
Moyenne
CVE-2025-11072 The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be…
Description
The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MelAbu WP Download Counter Button 1.8 | premières → 1.8.6.7 | Pas de correctif indiqué |