CVE-2020-24141 | BDVDB-2026-156396 Detail

Description#

Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote parameter to download-add.php. It can help identify open ports, local network hosts and execute command on services

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/secwx/research/blob/main/cve/CVE-2020-24141.md

Exploit#

No public exploit known

History#

Version 12021-07-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.