CVE-2022-1585

🗓️ 01 Aug 2022 12:48:01Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 66 Views

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-1585	1 Aug 202213:15	–	attackerkb
Circl	CVE-2022-1585	1 Aug 202220:45	–	circl
CNNVD	WordPress plugin Project Source Code Download 安全漏洞	1 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-1585 Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download	1 Aug 202212:48	–	cvelist
EUVD	EUVD-2022-24875	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1585	1 Aug 202213:15	–	nvd
Patchstack	WordPress Project Source Code Download plugin <= 1.0.0 - Unauthenticated Backup Download vulnerability	11 Jul 202200:00	–	patchstack
Prion	Design/Logic Flaw	1 Aug 202213:15	–	prion
Positive Technologies	PT-2022-13984 · WordPress · Project Source Code Download	1 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-1585	22 May 202523:31	–	redhatcve

NVD

Vulners

Node

project-source-code-download_project project-source-code-downloadMatch1.0.0wordpress

[
  {
    "product": "WordPress project source code download",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.0.0",
        "status": "affected",
        "version": "1.0.0",
        "versionType": "custom"
      }
    ]
  }
]