Skip to content
OpenAdvisories
Unscored CVE-2022-2367 EUVD-2022-34635GHSA-vm96-qm8v-2cgx

WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass

Published Aug 8, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

Affected products

VendorProductAffectedFixed
— WSM Downloader 1.4.0 – ≤ 1.4.0 —

References