CVE-2022-25606

概要

参考情報

• patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-5-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities · Third Party Advisory
• wordpress.org/plugins/wp-downloadmanager · Third Party Advisory

wp-downloadmanager のその他の脆弱性

• CVE-2025-4799高 7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can …
• CVE-2025-4798中 4.9The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10. This is due …
• CVE-2022-25605中 5.4Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68…
• CVE-2021-44760中 5.4Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.
• CVE-2020-24141中 5.3Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end s…