CVE Catalog
CVE-2026-61980
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.50%
43th percentile - higher than 43% of all known CVEs
Summary
The OMGF Pro plugin versions up to 5.2.7 allow unauthenticated users to download arbitrary files from the server.
Risk Assessment
An attacker can download sensitive files such as configuration files or user data, potentially leading to information disclosure.
Recommendation
Update the OMGF Pro plugin to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in OMGF Pro
Original NVD description (English source)
Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS