Lana: >> Lana Downloads Manager >> 1.8.0 Security Vulnerabilities
The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server
CVSS Score
4.1
EPSS Score
0.001
Published
2025-04-01