Lucene search
PRIOn knowledge basePRION:CVE-2021-31567HistoryJan 28, 2022 - 8:15 p.m.
Arbitrary file deletion
2022-01-2820:15:00
PRIOn knowledge base
www.prio-n.com
0.001 Low
EPSS
Percentile
44.2%
Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6). The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadable_file_urls[0] parameter data. It’s also possible to escape from the web server home directory and download any file within the OS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| download_monitor | le | 4.4.6 |
Related
cve
cve
CVE-2021-31567
2022-01-28 20:15:11
wpvulndb
wpvulndb
Download Monitor < 4.4.7 - Admin+ Arbitrary File Download
2021-10-29 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2021-31567
2022-01-28 20:15:11
patchstack
patchstack
cnvd
cnvd
WordPress Download Monitor plugin arbitrary file download vulnerability
2022-03-18 00:00:00
openvas
openvas
WordPress Download Monitor Plugin < 4.4.7 Multiple Vulnerabilities
2022-02-08 00:00:00