medium6.1
CVE-2017-2217
Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct …
Impact
Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| W3eden | Download Manager | through 2.9.50 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/jp/JVN79738260/index.html
- https://plugins.trac.wordpress.org/changeset/1650075/
- https://wordpress.org/plugins/download-manager/#developers
- https://jvn.jp/en/jp/JVN79738260/index.html
- https://plugins.trac.wordpress.org/changeset/1650075/
- https://wordpress.org/plugins/download-manager/#developers