ichurakov

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ichurakov records in CISA KEV

No ichurakov vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-42316 CVE-2025-68857 · GHSA-mh85-rfqv-qpgw

WordPress Paid Downloads plugin <= 3.15 - SQL Injection vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ichurakov Paid Downloads paid-downloads allows Blind SQL Injection.This issue affects Paid Downloads: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00336 Published 2026-01-22 No fix listed CWE-89

TI-2026-59998 CVE-2026-87935 · GHSA-8qvx-4h8h-jjwf

Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

LOW 39

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the admin_request_handler function.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00912 Published 2026-09-17 No fix listed CWE-434

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0