Metagauss Download Plugin

• CVE-2025-6586 High 7.2 Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload 1.3%
• CVE-2024-9829 Medium 6.5 Download Plugin <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download 0.4%
• CVE-2022-36345 Medium 4.3 WordPress Download Plugin Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%