NetSight
high7.5

CVE-2022-2357

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive o…

Impact

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

Affected products

VendorProductAffected versions
Wsm Downloader ProjectWsm Downloader
through 1.4.0

Weakness classification

References