Lana Downloads Manager, CVE-2025-2048

CVE, Research URL: CVE-2025-2048
Home page URL: Security reports for Lana Downloads Manager
Application: Lana Downloads Manager
Published on: Apr 01, 2025
Research Description: The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server
Affected versions: Min -, max 1.10.0.
Status: vulnerable