Downloadable By American Osteopathic Association
downloadable_by_american_osteopathic_association
Vendor: Osteopathic • 2 CVEs
CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Osteopathic 1Downloadable By American Osteopathic Association Jun 17, 2026 Mar 25, 2025 N/A· v4 7.2 HIGH· v3 N/A· v2 The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs. |
1Osteopathic 1Downloadable By American Osteopathic Association Jun 17, 2026 Mar 25, 2025 N/A· v4 8.6 HIGH· v3 N/A· v2 The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server |