CVE Catalog
CVE-2015-1000002
HighSummary
The filedownload plugin version 1.4 for WordPress contains an open proxy, which may lead to unauthorized access to resources.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to intercept data or conduct man-in-the-middle attacks.
Recommendation
It is recommended to update the plugin to the latest version or deactivate it to minimize risk.
Other vulnerabilities in filedownload v1.4 WordPress plugin
Original NVD description (English source)
Open Proxy in filedownload v1.4 wordpress plugin

