Lucene search

CVE-2024-35162

🗓️ 22 May 2024 05:33:30Reported by jpcertType

Path traversal vulnerability in Download Plugins and Theme

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2024-35162	22 May 202406:15	–	cve
NVD	CVE-2024-35162	22 May 202406:15	–	nvd
WPVulnDB	Download Plugins and Themes from Dashboard < 1.8.6 - Authenticated (Admin+) Arbitrary File Download	6 Jun 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-35162	22 May 202405:30	–	vulnrichment
Japan Vulnerability Notes	JVN#85380030: WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal	17 May 202400:00	–	jvn
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence

[
  {
    "vendor": "WPFactory LLC",
    "product": "Download Plugins and Themes from Dashboard",
    "versions": [
      {
        "version": "prior to 1.8.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN85380030/
wordpress	www.wordpress.org/plugins/download-plugins-dashboard/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 May 2024 05:30Current

9.1High risk

Vulners AI Score9.1

EPSS0.00223