Unrated severityNVD Advisory· Published Apr 2, 2008· Updated Apr 23, 2026
CVE-2008-1646
CVE-2008-1646
Description
SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dl_id parameter.
Affected products
2- cpe:2.3:a:arnos_toolbox:wp-download:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:wordpress:wp_download:1.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.