CVE-2024-13617

Name of the Vulnerable Software and Affected Versions aoa-downloadable WordPress plugin version 0.1.0

Description The issue allows unauthenticated attackers to download arbitrary files from the server due to a lack of validation for a parameter in the download function.

Recommendations For version 0.1.0, consider disabling the download function until a patch is available to prevent exploitation. Restrict access to sensitive files on the server to minimize the risk of unauthorized access.