CVE-2022-1585 — Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download
The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to …
Published: 2022-08-01 · CVSS: Unscored
The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7