Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Wsm Downloader ProjectWsm Downloader

2 matches found

CVE
CVE•added 2022/08/08 2:15 p.m.•43 views

CVE-2022-2357

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

7.5CVSS7.5AI score0.00192EPSS
CVE
CVE•added 2022/08/08 2:15 p.m.•41 views

CVE-2022-2367

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

7.5CVSS7.5AI score0.00189EPSS