Lucene search
Raad Haddad of Cloudyrion GmbHWPVDB-ID:D94B721E-9CE2-45E5-A673-2A57B0137653HistoryAug 01, 2022 - 12:00 a.m.
Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction
2022-08-0100:00:00
Raad Haddad of Cloudyrion GmbH
wpscan.com
6
0.002 Low
EPSS
Percentile
58.9%
The plugin prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible to bypass IP-based download blocking restrictions.
PoC
When downloading a file, add an X-Forwarded-For header that contains a random IP address to your request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| download-manager | lt | 3.2.50 |
Related
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2022-2362
2022-08-22 15:15:14
wpexploit
wpexploit
Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction
2022-08-01 00:00:00
prion
prion
Design/Logic Flaw
2022-08-22 15:15:00
cve
cve
CVE-2022-2362
2022-08-22 15:15:14
openvas
openvas
WordPress Download Manager Plugin < 3.2.50 XSS Vulnerability
2022-08-25 00:00:00