Lucene search
Bob MatyasWPVDB-ID:469486D4-7677-4D66-83C0-A6B9AC7C503BHistoryMar 04, 2024 - 12:00 a.m.
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-0400:00:00
Bob Matyas
wpscan.com
7
plugin
csrf
attackers
admins
downloads
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack
PoC
Make an admin open an HTML file containing the following:
Related
vulnrichment
vulnrichment
CVE-2024-1962 CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-25 05:00:02
cve
cve
CVE-2024-1962
2024-03-25 05:15:50
cvelist
cvelist
CVE-2024-1962 CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-25 05:00:02
nvd
nvd
CVE-2024-1962
2024-03-25 05:15:50
wpexploit
wpexploit
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-04 00:00:00
wordfence
wordfence
AI Score
6.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:469486D4-7677-4D66-83C0-A6B9AC7C503B