TI-2019-15777 CVE-2019-25727 · GHSA-857m-5g3w-m57pWordPress Plugin ad manager wd 1.0.11 Arbitrary File DownloadPriority MEDIUM 48WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0046 · Published 2026-06-04 · No fix listed CWE-22