Download-Manager Download Manager vulnerabilities

1 known vulnerability affecting download-manager/download_manager.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-2431HIGHCVSS 8.8≥ 3.2.50, ≤ 3.2.502022-09-06

CVE-2022-2431 [HIGH] CWE-73 CVE-2022-2431: The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion in versions up to The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion in versions up to, and including 3.2.50. This is due to insufficient file type and path validation on the deleteFiles() function found in the ~/Admin/Menu/Packages.php file that triggers upon download post deletion. This makes it possible for contributor level users and ab