Urbanbase: >> Z-Downloads >> 1.11.6 Security Vulnerabilities
The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.
CVSS Score
9.1
EPSS Score
0.067
Published
2025-05-15