Miembros de
Boletines de Vulnerabilidades |
CVE-2025-2519 |
|
| Software afectado | WORDPRESS |
| The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. This is due to insufficient file validation in the 'st_send_download_file' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download arbitrary files. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-2519 | |
