medium5.3
CVE-2025-11072
The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated …
Impact
The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files.
Affected products
| Product | Affected versions |
|---|---|
| MelAbu WP Download Counter Button WordPress Plugin | through 1.8.6.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.