← Back to CVE List

CVE-2025-2048

Published: 2025-04-01T06:15Z
Last Modified: 2025-04-01T20:26Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server > MITRE Terms of Use apply – see LICENSE‑MITRE.txt