title: Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download
description: The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.
problem types: CWE-552 Files or Directories Accessible to External Parties
affected:
{
product: Lana Downloads Manager
vendor: Unknown
versions:
lessThan: 1.8.0, status: affected, version: 1.8.0, versionType: custom
}