The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/d6a78233-3f23-4da4-9bc0-1439cde20a30/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Jun 2025, 15:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/d6a78233-3f23-4da4-9bc0-1439cde20a30/ - Exploit, Third Party Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:osteopathic:downloadable_by_american_osteopathic_association:*:*:*:*:*:wordpress:*:* | |
| First Time |
Osteopathic
Osteopathic downloadable By American Osteopathic Association |
25 Mar 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-25 06:15
Updated : 2025-06-20 15:50
NVD link : CVE-2024-13618
Mitre link : CVE-2024-13618
JSON object : View
Products Affected
osteopathic
- downloadable_by_american_osteopathic_association
CWE