Lucene search
PRIOn knowledge basePRION:CVE-2022-2222HistoryJul 17, 2022 - 11:15 a.m.
Design/Logic Flaw
2022-07-1711:15:00
PRIOn knowledge base
www.prio-n.com
3
The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup.
| CPE | Name | Operator | Version |
|---|---|---|---|
| download_monitor | lt | 4.5.91 |
Related
patchstack
patchstack
cnvd
cnvd
WordPress plugin Download Monitor arbitrary file download vulnerability
2022-07-19 00:00:00
nvd
nvd
CVE-2022-2222
2022-07-17 11:15:09
wpexploit
wpexploit
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
2022-04-05 00:00:00
osv
osv
CVE-2022-2222
2022-07-17 11:15:09
cve
cve
CVE-2022-2222
2022-07-17 11:15:09
cvelist
cvelist
CVE-2022-2222 Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
2022-07-17 10:37:28
wpvulndb
wpvulndb
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
2022-04-05 00:00:00