Lucene search
HistoryJan 01, 2024 - 3:15 p.m.
CVE-2023-6421
download manager
wordpress
plugin
vulnerability
leaked passwords
file download
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
36.0%
The Download Manager WordPress plugin before 3.2.83 does not protect file download’s passwords, leaking it upon receiving an invalid one.
Affected configurations
Node
wpdownloadmanagerwordpress_download_managerRange<3.2.83wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wpdownloadmanager | wordpress_download_manager | * | cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
cve
cve
CVE-2023-6421
2024-01-01 15:15:43
prion
prion
Default credentials
2024-01-01 15:15:00
cvelist
cvelist
wpexploit
wpexploit
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
36.0%
Related for NVD:CVE-2023-6421