CVE-2022-2357

High

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files,…

WPScan·CWE-552·Published 2022-08-08

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

182 chars

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

NVDen

182 chars

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

El plugin WSM Downloader de WordPress versiones hasta 1.4.0, permite a cualquier visitante usar su función de descarga remota de archivos para descargar cualquier archivo local, incluyendo los sensibles como wp-config.php

CVE-2022-2357

CVSS metrics across sources