PoC Index85,100 CVEs with PoCs

CVE-2024-50507

WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

CRITICAL 9.8EPSS 1.0%

Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3.

Affected
Daschmi · DS.DownloadList
CVSS v3.1 PATCHSTACK
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.04% chance of exploitation in the next 30 days, 64th percentile
Published
2024-10-30
Updated
2026-05-11

Proof-of-concept exploits (1)

References