dFactory Download Attachments

• CVE-2026-39616 Medium 5.3 WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
• CVE-2025-49995 Medium 5.3 WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability 0.4%
• CVE-2024-3230 Medium 6.4 Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%