All 2 CVE vulnerabilities found in Paid Downloads, with AI-generated Chinese analysis, references, and POCs.
Vendor: ichurakov
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-87935 | Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action CWE-434 | 8.1 | High | 2026-09-17 |
| CVE-2025-68857 | WordPress Paid Downloads plugin <= 3.15 - SQL Injection vulnerability CWE-89 | 9.3 | Critical | 2026-01-22 |
All 2 known CVE vulnerabilities affecting Paid Downloads with full Chinese analysis, references, and POCs where available.