Unscored CVE-2017-2217 EUVD-2017-11400GHSA-xrg2-49wj-f33v

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary we…

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: W3 Eden Product: WordPress Download Manager Category: Web / CMS

Description

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
W3 Eden	WordPress Download Manager	prior to version 2.9.51	—

References

https://plugins.trac.wordpress.org/changeset/1650075/
JVN#79738260 third-party-advisory
https://wordpress.org/plugins/download-manager/#developers