CVE Catalog
CVE-2026-61980
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.37%
30th percentile - higher than 30% of all known CVEs
Summary
The OMGF Pro plugin versions up to 5.2.7 allow unauthenticated users to download arbitrary files from the server.
Risk Assessment
An attacker can download sensitive files such as configuration files or user data, potentially leading to information disclosure.
Recommendation
Update the OMGF Pro plugin to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.