The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/8d6dd979-21ef-4d14-9c42-bbd1d7b65c53/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Jun 2025, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/8d6dd979-21ef-4d14-9c42-bbd1d7b65c53/ - Exploit, Third Party Advisory | |
| First Time |
Osteopathic
Osteopathic downloadable By American Osteopathic Association |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:osteopathic:downloadable_by_american_osteopathic_association:*:*:*:*:*:wordpress:*:* |
25 Mar 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-25 06:15
Updated : 2025-06-20 15:47
NVD link : CVE-2024-13617
Mitre link : CVE-2024-13617
JSON object : View
Products Affected
osteopathic
- downloadable_by_american_osteopathic_association
CWE