CNNVD-202601-4095 Information

CNNVD ID

CNNVD-202601-4095

CVE-2026-24541

  • CNNVD Published: 2026-01-23

Description (Chinese)

ws等都是(WebSockets)开源的产品。ws是一个 Node.js WebSocket 库。FreeBSD ctl等都是(FreeBSD)基金会的产品。ctl是一个工具。R infrastructure gh等都是(R infrastructure)开源的产品。gh是一个GitHub的API库。 WordPress plugin Download After Email 2.1.9及之前版本存在安全漏洞,该漏洞源于缺少授权,可能导致利用错误配置的访问控制安全级别。

Description (English)

Ws are all open-source products. Ws is a Node.js WebSocket library. FreeBSD ctl etc. are the products of FreeBSD. Ctl is a tool. R infrastructure gh etc. are open-source products. gh is a Github API library. WordPress Plugin Download Security Email 2.1.9 and previous versions had a security loophole, which stemmed from a lack of authorization and could lead to access control security levels using the wrong configuration.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

WordPress

Published

2026-01-23

Last Modified

2026-02-24

References

https://patchstack.com/database/Wordpress/Plugin/download-after-email/vulnerability/wordpress-download-after-email-plugin-2-1-9-broken-access-control-vulnerability?_s_id=cve

Share on: