CVE-2022-2357 — WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download
The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config…
Published: 2022-08-08 · CVSS: Unscored
The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7