Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1585

Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download

Description

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WordPress project source code download

  • 1.0.0 to ≤ 1.0.0affected

References