GCVE - cpe:2.3:a:osteopathic:downloadable_by_american_osteopathic

Approved changes feed: RSS · Atom

cpe:2.3:a:osteopathic:downloadable_by_american_osteopathic_association:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Osteopathic (`bfa211ce-3bb9-5ef4-8511-42589025ddac`)
Product	Downloadable By American Osteopathic Association (`15b9d60d-deb3-5d5c-9eb7-55a0df34a013`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-13618`	vulnerable	2026-06-08 06:25:38.077927	Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated SSRF The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs. Published: 2025-03-25T06:00:13.473Z Updated: 2025-03-25T14:17:37.850Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/d6a78233-3f23-4da4-9bc0-1439cde20a30/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-13617`	vulnerable	2026-06-08 06:25:38.077425	Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server Published: 2025-03-25T06:00:13.131Z Updated: 2025-03-25T14:18:36.010Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/8d6dd979-21ef-4d14-9c42-bbd1d7b65c53/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.