Read the docs

Wsm Downloader Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Wsm Downloader Project records in CISA KEV

No Wsm Downloader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wsm Downloader 2 records LOW

Records

2 records

TI-2022-02176 CVE-2022-2357 · GHSA-j7q2-cxfq-x3j6

WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download

Priority LOW 36

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0146 Published 2022-08-08 No fix listed CWE-552
TI-2022-02183 CVE-2022-2367 · GHSA-vm96-qm8v-2cgx

WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass

Priority LOW 35

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01202 Published 2022-08-08 No fix listed CWE-639
Open these records in search →