Lucene search
PRIOn knowledge basePRION:CVE-2021-25087HistoryMar 07, 2022 - 9:15 a.m.
Information disclosure
2022-03-0709:15:00
PRIOn knowledge base
www.prio-n.com
3
The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_download_manager | lt | 3.2.35 |
Related
wpvulndb
wpvulndb
Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure
2022-02-02 00:00:00
patchstack
patchstack
cvelist
cvelist
nvd
nvd
CVE-2021-25087
2022-03-07 09:15:08
wpexploit
wpexploit
Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure
2022-02-02 00:00:00
cve
cve
CVE-2021-25087
2022-03-07 09:15:08
openvas
openvas