Vendor archive

wsm_downloader_project CVEs

Beta · best-effort

2 CVEs tagged to vendor wsm_downloader_project — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2022-2367

Published Aug 8, 2022

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" paramete…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-2357

Published Aug 8, 2022

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.p…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1