Skip to content
OpenAdvisories

Product · almosteffortless

secure-files Plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

    A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traver…