Download Plugin by metagauss

Download Plugin by metagauss <= 2.0.4 - CSRF

LANACOMMONVDB ID: 6e8878ba-2a3b-495f-b3a1-a881c75bc405

The plugin does not have proper Cross-Site Request Forgery (CSRF) check in some places, which could allow attackers to make logged in admins perform unwanted actions via Cross-Site Request Forgery (CSRF) attacks.

You must be log in to view vulnerability details.

Or register a new account.

References

Source Code: https://wordpress.org/plugins/download-plugin/

CVE: CVE-2022-36345

Attributes

Catgory: WordPress Plugin

Discovered: 2022-08-12

Published: not yet

Affected Version: <= 2.0.4

Classification

Type: Cross-Site Request Forgery (CSRF)

Researcher

Name: István Márton

Email: [email protected]

Support Us?

We would truly appreciate it if you bought us a bunny (food for a snow leopard).