Vulnerabilities (CVE)

Filtered by vendor Werdswords Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-5465 1 Werdswords 1 Download Shortcode 2024-11-21 5.0 MEDIUM N/A
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.