Download Monitor, fbe2588da943f9426ce5fe110b52bfe2fe5d4913
- CVE, Research URL
- Home page URL
- Application
- Published on
- Nov 26, 2022
- Research Description
- Download Monitor [download-monitor] < 4.7.52 Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive information intended for administrators.
- Affected versions
-
max 4.7.52.
- Status
-
vulnerable