Files
CVEs-PoC/2025/CVE-2025-2048.md
T
2025-09-29 21:09:30 +02:00

843 B

CVE-2025-2048

Description

The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server

POC

Reference

Github

No PoCs found on GitHub currently.