Lucene search
PRIOn knowledge basePRION:CVE-2021-25059HistoryNov 28, 2022 - 2:15 p.m.
Design/Logic Flaw
2022-11-2814:15:00
PRIOn knowledge base
www.prio-n.com
1
download plugin
wordpress
design flaw
logic flaw
unauthorized access
backup nonce
website security
The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup’s nonce identifier, which may allow any users with an account on the site (such as subscriber) to download a full copy of the website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| download_plugin | lt | 2.0.0 |
Related
cvelist
cvelist
CVE-2021-25059 Download Plugin < 2.0.0 - Subscriber+ Website Download
2022-11-28 13:47:09
patchstack
patchstack
cve
cve
CVE-2021-25059
2022-11-28 14:15:10
nvd
nvd
CVE-2021-25059
2022-11-28 14:15:10