CVEvulnerability

CVE-2022-2392

6.5 MEDIUM Published 2022-08-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-552

Description

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

Affected configurations

• lana lana downloads manager (< 1.8.0)

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References