Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Lana Component: Lana Downloads Manager Clear all filters
TI-2025-01786 CVE-2025-2048 · GHSA-jw49-5g4r-c94w

Lana Downloads Manager < 1.10.0 - Admin+ Arbitrary File Download via Path Traversal

Priority MEDIUM 52

The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the serv…

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00527 Published 2025-04-01 Fixed in 1.10.0 CWE-22
TI-2022-02208 CVE-2022-2392 · GHSA-789c-4pgv-92rh

Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download

Priority LOW 31

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01148 Published 2022-08-22 Fixed in 1.8.0 CWE-552