CVE-2022-2357 — WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download

CVE-2022-2357

WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download PUBLISHED

Description (CNA)

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

Affected (CNA)

Vendor / product	Versions
Unknown / WSM Downloader	affected 1.4.0 through 1.4.0

CWE

CWE-552

References

https://wpscan.com/vulnerability/42499b84-684e-42e1-b7f0-de206d4da553

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/42499b84-684e-42e1-b7f0-de206d4da553