CVEDB API

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 66.8%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2015-9348

Codepeople » Sell Downloads » Version: 1.0

cpe:2.3:a:codepeople:sell_downloads:1.0
Codepeople » Sell Downloads » Version: 1.0.1

cpe:2.3:a:codepeople:sell_downloads:1.0.1
Codepeople » Sell Downloads » Version: 1.0.2

cpe:2.3:a:codepeople:sell_downloads:1.0.2
Codepeople » Sell Downloads » Version: 1.0.3

cpe:2.3:a:codepeople:sell_downloads:1.0.3
Codepeople » Sell Downloads » Version: 1.0.4

cpe:2.3:a:codepeople:sell_downloads:1.0.4
Codepeople » Sell Downloads » Version: 1.0.5

cpe:2.3:a:codepeople:sell_downloads:1.0.5
Codepeople » Sell Downloads » Version: 1.0.6

cpe:2.3:a:codepeople:sell_downloads:1.0.6
Codepeople » Sell Downloads » Version: 1.0.7

cpe:2.3:a:codepeople:sell_downloads:1.0.7