Every CVE whose affected-product data names Urbanbase Z-downloads, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2024-8673 — CVSS 9.1 (critical): The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing…
CVE-2024-8699 — CVSS 7.2 (high): The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to…
CVE-2024-8703 — CVSS 6.1 (medium): The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could…