Vulnerability CVE-2022-2367


Published: 2022-08-08

Description:
The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

Type:

CWE-639

(Authorization Bypass Through User-Controlled Key)

 References:
https://wpscan.com/vulnerability/46afb0c6-2d0c-4a20-a9de-48f35ca93f0f

Copyright 2026, cxsecurity.com

 

Back to Top