CVE-2021-31567

WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

Medium · published January 28, 2022

CVSS v3.1
6.8
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6). The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadable_file_urls[0] parameter data. It's also possible to escape from the web server home directory and download any file within the OS.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01391 · 72.1th percentile
Published
2022-01-28T19:09Z
EPSS history
Timeline
  • 28 JAN 19:09Z
    WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability
    cvelistv5