CVE Database /
CVE-2022-2926
CVE · Medium
CVE-2022-2926 — Download Manager [download-manager] < 3.2.55
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-2926
|
Download Manager [download-manager] < 3.2.55 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Medium
4.9
|
< 3.2.55
|
3.2.55 |
2022-09-05 |
—
|
CVE-2022-2926
The Download Manager plugin for WordPress through version 3.2.54 contains a path traversal flaw in the File Browser Root field that allows administrators to enumerate and access files and directories outside the WordPress installation directory. An authenticated attacker with admin privileges could exploit this vulnerability to view arbitrary files on the server. This issue was patched in version 3.2.55.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings