Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2022/08/08 1:47 p.m.38 views

CVE-2022-2367 WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation...

7.7AI score0.01127EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2022/07/12 12:00 a.m.35 views

WordPress WSM Downloader plugin <= 1.4.0 - Domain Name Restriction Bypass vulnerability

Domain Name Restriction Bypass vulnerability discovered by Raad Haddad in WordPress WSM Downloader plugin versions = 1.4.0. Solution Deactivate and delete. This plugin has been closed as of July 8, 2022 and is not available for download. This closure is temporary, pending a full review...

7.5CVSS2.4AI score0.01127EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder