WSM Downloader vulnerabilities
We track 2 vulnerabilities in WSM Downloader products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 8, 2022.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest WSM Downloader vulnerabilities
- 7.5 High severity
WSM Downloader: Authorization Bypass Through User-Controlled Key
The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation
- 7.5 High severity
WSM Downloader: Files or Directories Accessible to External Parties
The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.