Skip to content
OpenAdvisories
Unscored CVE-2022-2392 EUVD-2022-34657GHSA-789c-4pgv-92rh

Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download

Published Aug 22, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

Affected products

VendorProductAffectedFixed
— Lana Downloads Manager 1.8.0 – < 1.8.0 1.8.0

References