WordPress plugin
Sell Downloads security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium2
- Low0
All Sell Downloads vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.2.3Update to 1.2.4 | CVE-2026-94590 | |
| Medium5.3 | Missing Authorization ≤1.1.12Update to 1.2.0 | CVE-2025-68850 | |
| High7.5 | Improper Input Validation <1.0.8Update to 1.0.8 | CVE-2015-9348 | |
| High7.5 | Arbitrary File Read ≤1.0.1Update to 1.0.2 | CVE-2014-9511 |
- Medium5.3Missing Authorization
≤1.2.3Update to 1.2.4
- Medium5.3Missing Authorization
≤1.1.12Update to 1.2.0
- High7.5Improper Input Validation
<1.0.8Update to 1.0.8
- High7.5Arbitrary File Read
≤1.0.1Update to 1.0.2
Sell Downloads: common questions
Does Sell Downloads have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Sell Downloads: 2 high, 2 medium. None are known to affect version null.
How do I check which version of Sell Downloads I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Sell Downloads vulnerability?
CVE-2026-94590, published Oct 8, 2026: Sell Downloads <= 1.2.3 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Sell Downloads vulnerability listed in CISA KEV?
No. None of the known Sell Downloads vulnerabilities is currently listed in the CISA KEV catalog.