CVE-2022-36345

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/download-plugin/wordpress-download-plugin-2-0-4-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Lỗ hổng khác của download plugin

• CVE-2025-6586CAO 7.2The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_loc…
• CVE-2024-9829TRUNG BÌNH 6.5The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handl…
• CVE-2021-25059TRUNG BÌNH 4.3The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup's nonce i…
• CVE-2021-24703TRUNG BÌNH 5.7The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowin…