Cpe:2.3:a:wordpress:wp_file_download:*:*:*:*:*:*:*:*

The WP File Download plugin for WordPress contains a path traversal vulnerability in its file save and delete functions, allowing authenticated subscribers to delete arbitrary files on the server, potentially leading to remote code execution.