PT-2025-9160

CVE-2025-1730

·

Published

2025-02-28

·

Updated

2025-03-02

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Simple Download Counter plugin for WordPress versions up to and including 2.0
Description The issue allows authenticated attackers with Author-level access and above to read arbitrary files on the server, including sensitive data such as wp-config.php or /etc/passwd, via the simple download counter download handler.
Recommendations For Simple Download Counter plugin for WordPress versions up to and including 2.0, update to a version above 2.0 to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-73: External Control of File Name or Path
Related identifiers
CVE-2025-1730
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com