CVE-2022-2357 | BDVDB-2026-181756 Detail

WSM Downloader

Description#

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-552 Files or Directories Accessible to External Parties

References#

https://wpscan.com/vulnerability/42499b84-684e-42e1-b7f0-de206d4da553

Exploit#

No public exploit known

History#

Version 12022-08-08Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.