CVE-2022-2981
Download Monitor < 4.5.98 - Admin+ Arbitrary File Download
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup.
| CWE | CWE-552 |
| Vendor | unknown |
| Product | download monitor |
| Published | Oct 10, 2022 |
| Last Updated | Aug 3, 2024 |
Stay Ahead of the Next One
Get instant alerts for unknown download monitor
Be the first to know when new unknown vulnerabilities affecting unknown download monitor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Download Monitor
4.5.98 < 4.5.98
References
Credits
Raad Haddad of Cloudyrion GmbH