CVE-2024-35162 — WPFactory LLC / Download Plugins and Themes from Dashboard

Description (CNA)

Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6. If this vulnerability is exploited, a remote authenticated attacker with "switch_themes" privilege may obtain arbitrary files on the server.

Affected (CNA)

Vendor / product	Versions
WPFactory LLC / Download Plugins and Themes from Dashboard	affected prior to 1.8.6

CWE

No CWE identifiers supplied.

References

https://wordpress.org/plugins/download-plugins-dashboard/
https://jvn.jp/en/jp/JVN85380030/

ADP enrichment

CVE

No English description supplied.

https://wordpress.org/plugins/download-plugins-dashboard/
https://jvn.jp/en/jp/JVN85380030/

CISA-ADP

No English description supplied.

No references supplied.