CVE-2022-2357CWE-552

WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download

published August 8, 2022

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01433 · 72.9th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2022-08-08T13:47Z
EPSS history
Timeline
  • 08 AUG 13:47Z
    WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download
    cvelistv5