Vulnerabilidades do dFactory Download Attachments

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam dFactory Download Attachments: 1 registro(s), com versões afetadas e correções.

CVE-2026-39616 Média · 5.3 CWE-639 08/04/2026

WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Attachments: from n/a through <= 1.4.0.