Vulnerabilities and security researches fordownload-counter-button download-counter-button

Nov 11, 2025

CVE, Research URL: CVE-2025-11072
Home page URL: Security reports for MelAbu WP Download Counter Button
Application: MelAbu WP Download Counter Button
Date: Nov 05, 2025
Research Description: The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files.
Affected versions: max 1.8.6.7.
Status: vulnerable