Zip Attachments

The Download Button plugin adds a simple button to posts, pages, or custom post types that creates a zip file of the post attachments and downloads it. The plugin has no default output and is customizable with CSS. It also includes a shortcode, download counter per post, and allows users to choose the output text. However, there is a known issue where cancelled downloads are not deleted from the /wp-content/uploads folder. The plugin creator welcomes patches and requests, and can be contacted on Twitter or their blog.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Access violation vulnerability in Zip Attachments 1.6

    Open

    The Zip Attachments plugin for WordPress has a security issue that could result in data being lost without permission. This is because the plugin does not have proper authorization and capability che...

    Read More
  • Access violation vulnerability in Zip Attachments 1.6

    Open

    The Zip Attachments plugin for WordPress has a security issue that allows unauthorized individuals to access data. This is because it lacks a capability check and post status validation in the za_cre...

    Read More
  • Access violation vulnerability in Zip Attachments 1.5

    Fixed

    Read More