Vulnerabilities > Metagauss > Download Plugin > 2.0.5

DATE CVE VULNERABILITY TITLE RISK
2024-10-23 CVE-2024-9829 Missing Authorization vulnerability in Metagauss Download Plugin
The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handle_download_user' and 'dpwap_handle_download_comment' functions in all versions up to, and including, 2.2.0.
network
low complexity
metagauss CWE-862
6.5