2 matches found
CVE-2022-2367 WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass
The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation...
7.7AI score0.01127EPSS
SaveExploits1References1
WordPress WSM Downloader plugin <= 1.4.0 - Domain Name Restriction Bypass vulnerability
Domain Name Restriction Bypass vulnerability discovered by Raad Haddad in WordPress WSM Downloader plugin versions = 1.4.0. Solution Deactivate and delete. This plugin has been closed as of July 8, 2022 and is not available for download. This closure is temporary, pending a full review...
7.5CVSS2.4AI score0.01127EPSS
SaveExploits1References1Affected Software1
20