Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-11072

Download Counter Button <= 1.8.6.7 - Unauthenticated Arbitrary File Download

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown MelAbu WP Download Counter Button

Default version status: unknown

  • 0 to ≤ 1.8.6.7affected

References