PatchTheCVEsimple file downloader vulnerabilities and fixes
Recent CVEs affecting simple file downloader, with upgrade or downgrade steps. 1 tracked.
Also searched as: simplefiledownloader.
simple file downloader has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-02-21. Highest priority: CVE-2022-4764 (score 36/100).
- CVE-2022-4764 MEDIUM 5.4 UPGRADE The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode a
FAQ
How do I fix simple file downloader vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simple file downloader being exploited right now?
None of the tracked simple file downloader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simple file downloader CVE should I patch first?
CVE-2022-4764 currently ranks highest (36/100): The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode a.