dfactory Download Attachments vulnerabilities
3 published CVEs name dfactory Download Attachments among the affected products.
- Published CVEs
- 3
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20251
- 20261
Newest CVEs
- CVE-2026-39616
WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability
dFactory · Download Attachments
Medium5.3 - CVE-2025-49995
WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability
dFactory · Download Attachments
Medium5.3 - CVE-2024-3230
Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
dfactory · Download Attachments
Medium6.4