The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example.
History

Thu, 22 May 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2022-09-26T12:35:42.000Z

Updated: 2025-05-22T15:41:20.288Z

Reserved: 2022-09-01T00:00:00.000Z

Link: CVE-2022-3076

cve-icon Vulnrichment

Updated: 2024-08-03T01:00:09.712Z

cve-icon NVD

Status : Modified

Published: 2022-09-26T13:15:11.090

Modified: 2025-05-22T16:15:53.110

Link: CVE-2022-3076

cve-icon Redhat

No data.