7.5
CVSSv3

CVE-2022-2362

Published: 22/08/2022 Updated: 25/08/2022
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The Download Manager WordPress plugin prior to 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based download blocking restrictions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wpdownloadmanager wordpress download manager