CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The F70 Lead Document Download plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'file_download' function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to download any file from the WordPress media library by guessing or enumerating WordPress attachment IDs.
Explanation of Vulnerability in Simple Terms
F70 Lead Document Download versions 1.4.4 and earlier lack proper access controls on document retrieval. An unauthenticated attacker can read sensitive documents without permission by making direct requests to the download functionality. The vulnerability requires no user interaction and affects the confidentiality of stored documents.
What an attacker can do
Read sensitive documents without authentication or authorization.
Potential impact on your site
Confidential documents may be exposed to unauthorized parties without your knowledge.
Conditions required to exploit
Network access to the application; no authentication required.
Key dates
External resources
Related vulnerabilities
