Lucene search
HistoryMay 02, 2023 - 8:15 a.m.
CVE-2023-1809
wordpress plugin
security leak
master key
arbitrary files
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
50.5%
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.
Affected configurations
Node
wpdownloadmanagerdownload_managerRange6.0.0–6.3.0prowordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wpdownloadmanager | download_manager | * | cpe:2.3:a:wpdownloadmanager:download_manager:*:*:*:*:pro:wordpress:*:* |
Related
prion
prion
Design/Logic Flaw
2023-05-02 08:15:00
wpvulndb
wpvulndb
cve
cve
CVE-2023-1809
2023-05-02 08:15:10
cvelist
cvelist
wpexploit
wpexploit
wordfence
wordfence
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
50.5%
Related for NVD:CVE-2023-1809