CVE-2025-2048 — The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitra — CVE Database · The Intelligence Room