CVE-2022-36345

Description

References

• patchstack.com/database/vulnerability/download-plugin/wordpress-download-plugin-2-0-4-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

download plugin의 다른 취약점

• CVE-2025-6586높음 7.2The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_loc…
• CVE-2024-9829보통 6.5The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handl…
• CVE-2021-25059보통 4.3The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup's nonce i…
• CVE-2021-24703보통 5.7The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowin…