Aller au contenu
Se connecter
5.4 Moyenne

CVE-2021-25059 The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to…

Description

The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download a full copy of the website.

Produits et versions touchés

Produit Versions touchées Corrigé en
Download Plugin 2.0 premières → < 2.0.0 2.0.0

Autres CVE de Download Plugin

Les 2 CVE de Download Plugin →
CVE-2021-24703 The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the… Non notée
Suivre cette CVE