Dfactory Download Attachments — known CVE vulnerabilities
Every CVE whose affected-product data names Dfactory Download Attachments, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2023-0076 — CVSS 5.4 (medium): The Download Attachments WordPress plugin before 1.3 does not validate and escape some of its shortcode attributes before outputting them…