CVE-2022-1585

CVSS V2 None CVSS V3 High 7.5
Description
The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.
Overview
  • CVE ID
  • CVE-2022-1585
  • Assigner
  • contact@wpscan.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-08-01T13:15:09
  • Last Modified Date
  • 2022-08-04T18:47:39
Weakness Enumerations
CWE URL
CWE-552 http://cwe.mitre.org/data/definitions/552.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:project-source-code-download_project:project-source-code-download:1.0.0:*:*:*:*:wordpress:*:* 1 OR
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • NONE
  • Base Score
  • 7.5
  • Base Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 3.6
References
Reference URL Reference Tags
https://wpscan.com/vulnerability/e709958c-7bce-45d7-9a0a-6e0ed12cd03f
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-1585
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1585
History
Created Old Value New Value Data Type Notes
2022-08-01 14:00:05 Added to TrackCVE