CVE-2022-36345 Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Plugin <= 2.0.4 versions

Description

Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Plugin <= 2.0.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
Download Plugin 2.0	earliest → 2.0.4	No fix stated

Other CVEs of Download Plugin

The 3 CVEs of Download Plugin →

CVE-2025-6586 The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation… 7.2 High CVE-2024-9829 The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks… 6.5 Medium