Path Traversal Vulnerability in Download Counter by Anatoly
CVE-2025-60242
Currently unrated
What is CVE-2025-60242?
An improper limitation of a pathname to a restricted directory in the Download Counter plugin by Anatoly allows attackers to exploit path traversal vulnerabilities, potentially enabling unauthorized access to sensitive files on the server. This vulnerability impacts versions up to and including 1.4, allowing for arbitrary file downloads that could compromise the security of the system.
Affected Version(s)
Download Counter <= n/a