A vulnerability labeled as problematic has been found in Simple Downloads List Plugin up to 1.4.3 on WordPress. This issue affects the function
wp_ajax_neofix_sdl_edit of the component AJAX Endpoint. Such manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2025-12583. The attack may be launched remotely. There is no exploit available.