Login Request a demo
DA
Product
Download Attachments
by dfactory · last CVE Apr 8, 2026
4
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Download Attachments to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3230
6.4
0%
Jun 4
Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.3
CVE-2023-0076
5.4
0%
Mar 6
Download Attachments < 1.3 - Contributor+ Stored XSS
Affected: before 1.2.24
CVE-2026-39616
5.3
0%
Apr 8
WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 1.4.0
CVE-2025-49995
5.3
0%
Jun 20
WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 1.3.1
Showing 4