← Database

CVE-2024-8673

CRITICAL CVSS: 9.1 Published: 2025-05-15 Modified: 2026-06-17

Description

The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.

Affected Platforms

Urbanbase Z-Downloads

Weakness Type

NVD-CWE-noinfo

References