CVE Catalog

CVE-2015-1000002

High
Published: Translated: NVD NIST

Summary

The filedownload plugin version 1.4 for WordPress contains an open proxy, which may lead to unauthorized access to resources.

Risk Assessment

Organizations may be exposed to attacks that exploit this vulnerability to intercept data or conduct man-in-the-middle attacks.

Recommendation

It is recommended to update the plugin to the latest version or deactivate it to minimize risk.

Other vulnerabilities in filedownload v1.4 WordPress plugin

Original NVD description (English source)

Open Proxy in filedownload v1.4 wordpress plugin

Vulnerability data from NVD (NIST) · CISA KEV · EPSS