PT-2025-45082 · WordPress · Wp Download Counter Button

Khaled Alenazi · Published 2025-11-05 · Updated 2025-11-05 · CVE-2025-11072

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MelAbu WP Download Counter Button WordPress plugin versions through 1.8.6.7

Description The plugin does not properly check the location of files before allowing downloads. This could allow someone without an account to access and download any file on the server. The issue involves a lack of validation of file paths.

Recommendations Update to a version beyond 1.8.6.7.

Exploit

Fix

Related Identifiers

CVE-2025-11072

Affected Products

Wp Download Counter Button

References · 4

• 🔥 https://wpscan.com/vulnerability/538117c5-b04c-45fc-a953-6f619fdf7eaf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11072 · Security Note
• https://t.me/cveNotify/141765 · Telegram Post
• https://t.me/CVEtracker/36582 · Telegram Post