Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

dfactory

dfactory Download Attachments vulnerabilities

3 published CVEs name dfactory Download Attachments among the affected products.

Newest CVEs

  • CVE-2026-39616

    WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability

    dFactory · Download Attachments

    Medium5.3
  • CVE-2025-49995

    WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability

    dFactory · Download Attachments

    Medium5.3
  • CVE-2024-3230

    Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    dfactory · Download Attachments

    Medium6.4