Lucene search
China National Vulnerability DatabaseCNVD-2022-88243HistorySep 28, 2022 - 12:00 a.m.
WordPress CM Download Manager arbitrary file upload vulnerability
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wordpress
download manager
arbitrary file upload
vulnerability
remote code execution
php language
0.001 Low
EPSS
Percentile
43.1%
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress CM Download Manager versions prior to 2.8.6 are vulnerable to arbitrary file uploads. An attacker can exploit the vulnerability to upload malicious files and remotely execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress cm download manager | lt | 2.8.6 |
Related
cve
cve
CVE-2022-3076
2022-09-26 13:15:11
cvelist
cvelist
CVE-2022-3076 CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
2022-09-26 12:35:42
nvd
nvd
CVE-2022-3076
2022-09-26 13:15:11
wpexploit
wpexploit
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
2022-09-05 00:00:00
wpvulndb
wpvulndb
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
2022-09-05 00:00:00
prion
prion
Design/Logic Flaw
2022-09-26 13:15:00