CVE-2008-1646
No CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days.
SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dl_id parameter.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arnos_toolbox:wp-download
- wordpress:wp_download