Skip to content
OpenAdvisories

Vendor

niao70

1 known vulnerabilities.

Products

F70 Lead Document Download 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14633

    F70 Lead Document Download <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Media File Download

    The F70 Lead Document Download plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'file_download' function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attacker…

    niao70 F70 Lead Document Download Web / CMS