WordPress · Wp-File-Download · CVE-2025-5034
Name of the Vulnerable Software and Affected Versions
wp-file-download versions prior to 6.2.6
Description
The wp-file-download WordPress plugin does not properly sanitize and escape a parameter before displaying it on the page, resulting in a Reflected Cross-Site Scripting issue.
Recommendations
Update the wp-file-download plugin to version 6.2.6 or later.