Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-2367

WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Wsm Downloader Project
Products
Wsm Downloader
CVE-2022-2357

WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Wsm Downloader Project
Products
Wsm Downloader