CVE-2005-10002

A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traversal. Upgrading to version 1.2 is able to address this issue. The name of the patch is cab025e5fc2bcdad8032d833ebc38e6bd2a13c92. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-243804.

• CWE-22

• https://github.com/wp-plugins/secure-files/commit/cab025e5fc2bcdad8032d833ebc38e6bd2a13c92Patch
• https://vuldb.com/?ctiid.243804Permissions Required, Third Party Advisory
• https://vuldb.com/?id.243804Third Party Advisory
• https://github.com/wp-plugins/secure-files/commit/cab025e5fc2bcdad8032d833ebc38e6bd2a13c92Patch
• https://vuldb.com/?ctiid.243804Permissions Required, Third Party Advisory
• https://vuldb.com/?id.243804Third Party Advisory

Published

Oct 29, 2023

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0996Multiple SQL injection vulnerabilities in the Downloads modu…
• CVE-2005-0997Multiple SQL injection vulnerabilities in the Web_Links modu…
• CVE-2005-0998The Web_Links module for PHP-Nuke 7.6 allows remote attacker…
• CVE-2005-0999SQL injection vulnerability in the Top module for PHP-Nuke 6…
• CVE-2005-1000Multiple cross-site scripting (XSS) vulnerabilities in PHP-N…
• CVE-2005-10001A vulnerability was found in Netegrity SiteMinder up to 4.5.…6.1
• CVE-2005-10003A vulnerability classified as critical has been found in mik…9.8
• CVE-2005-10004Cacti versions prior to 0.8.6-d contain a remote command exe…8.8
• CVE-2005-1001PHP-Nuke 7.6 allows remote attackers to obtain sensitive inf…
• CVE-2005-1002logwebftbs2000.exe in Logics Software File Transfer (LOG-FT)…
• CVE-2005-1003Directory traversal vulnerability in index.php for ProfitCod…
• CVE-2005-1004Cross-site scripting (XSS) vulnerability in usrdetails.php i…