Vulnerabilities > Codepeople > Sell Downloads > 1.0.4

DATE CVE VULNERABILITY TITLE RISK
2019-08-27 CVE-2015-9348 Improper Input Validation vulnerability in Codepeople Sell Downloads
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
network
low complexity
codepeople CWE-20
5.0