download-from-files

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

download-from-files records in CISA KEV

No download-from-files vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2021-22553 CVE-2021-47940 · GHSA-8h4p-vqhv-pvp3

WordPress Download From Files 1.48 Arbitrary File Upload

HIGH 81

WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting the AJAX fileupload action.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00396 Published 2026-05-10 No fix listed CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0