CVE-2022-2367 | BDVDB-2026-181757 Detail

WSM Downloader

Description#

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

Impact#

No impact statement in the source data.

Weaknesses#

CWE-639 Authorization Bypass Through User-Controlled Key

References#

https://wpscan.com/vulnerability/46afb0c6-2d0c-4a20-a9de-48f35ca93f0f

Exploit#

No public exploit known

History#

Version 12022-08-08Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.