high7.5
CVE-2015-9348
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
Impact
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codepeople | Sell Downloads | before 1.0.8 |