Sell Downloads, CVE-2014-9511
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- The Sell Downloads plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.0.1 via the 'file' parameter. This can allow unauthenticated attackers to extract sensitive data such as settings/configuration files along with other useful information that can be used in future attacks.
- Affected versions
-
max 1.0.1.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Sell Downloads (CVE-2015-9348) , Jun 06, 2024 |
| Sell Downloads (CVE-2025-68850) , Jan 11, 2026 |
| Sell Downloads (CVE-2014-9511) , Jun 10, 2024 |