Skip to content
OpenAdvisories
High · 7.5 CVE-2025-60242 EUVD-2025-38105GHSA-575h-jw7h-9pjq

WordPress Download Counter plugin <= 1.4 - Arbitrary File Download vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Anatoly Download Counter download-counter allows Path Traversal.This issue affects Download Counter: from n/a through <= 1.4.

Affected products

VendorProductAffectedFixed
Anatoly Download Counter ≤ 1.4 —

References