WordPress m1.DownloadList Plugin Sensitive Data Exposure Vulnerability

Vulnerability

A vulnerability allowing the exposure of sensitive system information to an unauthorized control sphere exists in the WordPress m1.DownloadList plugin, affecting versions through 0.21. This issue could enable malicious actors to access sensitive data not typically available to regular users, potentially leading to the exploitation of other system weaknesses.

Impact

Exploitation of this vulnerability could allow unauthorized access to sensitive information, which could be used to exploit other vulnerabilities within the system.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.