Back to search
CVE-2022-2926
Published: Sep 26, 2022
Modified: May 21, 2025
PUBLISHED
Description
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory
| Vendor | Product | Versions |
|---|---|---|
Unknown | Download Manager | affected 3.2.55 - < 3.2.55 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now