Download Attachments

download-attachments · plugin

Known security vulnerabilities for Download Attachments. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Apr 8, 2026

Vulnerabilities

CVE-2024-3230
Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 6.4
CVE-2026-39616
WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability
Medium 5.3
CVE-2025-49995
WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability
Medium 5.3