Download Plugins and Themes from Dashboard, CVE-2024-35162

CVE, Research URL: CVE-2024-35162
Home page URL: Security reports for Download Plugins and Themes from Dashboard
Application: Download Plugins and Themes from Dashboard
Published on: May 22, 2024
Research Description: Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6. If this vulnerability is exploited, a remote authenticated attacker with "switch_themes" privilege may obtain arbitrary files on the server.
Affected versions: max 1.8.6.
Status: vulnerable