CVE-2022-1585CWE-552

Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download

published August 1, 2022

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01285 · 69.9th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2022-08-01T12:48Z
EPSS history
Timeline
  • 01 AUG 12:48Z
    Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download
    cvelistv5