CVE-2011-1669: Mikoviny Wp Custom Pages

Medium severity, CVSS 5.0. EPSS: 22.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.

Affected products

• Mikoviny Wp Custom Pages: version 0.5.0.1 only

Published 2011-04-10. Last modified 2026-06-16.