almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

CVE-2005-10002

Summary

A vulnerability exists in the almosteffortless secure-files Plugin for WordPress, specifically in the sf_downloads function within secure-files.php. This vulnerability occurs due to improper handling of the downloadfile argument, allowing an attacker to exploit path traversal and access unintended files on the server. Users are strongly advised to update to version 1.2 or later, which resolves this issue with a specified patch. Regular updates and monitoring are essential to maintain security against such vulnerabilities.

References