Skip to content
OpenAdvisories

Vendor

ichurakov

2 known vulnerabilities.

Products

Paid Downloads 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-87935

    Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

    The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the admin_request_handler function. This is due to missing authorization and file type validation in the admin_request_handler functi…

    ichurakov Paid Downloads Web / CMS