{"id":"CVE-2022-3076","state":"PUBLISHED","title":"CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload","description":"The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example.","publishedAt":"2022-09-26T12:35:42.000Z","updatedAt":"2025-05-22T15:41:20.288Z","severity":{"score":7.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown CM Download Manager"],"affected":[{"vendor":"Unknown","product":"CM Download Manager","versions":[{"version":"2.8.6","status":"affected","lessThan":"2.8.6","versionType":"custom"}]}],"references":["https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd"],"weaknesses":["CWE-434"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3076.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3076","state":"PUBLISHED","datePublished":"2022-09-26T12:35:42.000Z","dateUpdated":"2025-05-22T15:41:20.288Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2022-09-01T00:00:00.000Z"},"containers":{"cna":{"title":"CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload","descriptions":[{"lang":"en","value":"The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example."}],"affected":[{"vendor":"Unknown","product":"CM Download Manager","versions":[{"version":"2.8.6","status":"affected","lessThan":"2.8.6","versionType":"custom"}]}],"references":[{"url":"https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","dateUpdated":"2022-09-26T12:35:42.000Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81"},"credits":[{"lang":"en","value":"Mika"}],"source":{"discovery":"EXTERNAL"},"x_generator":"WPScan CVE Generator","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"contact@wpscan.com","ID":"CVE-2022-3076","STATE":"PUBLIC","TITLE":"CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"CM Download Manager","version":{"version_data":[{"version_affected":"<","version_name":"2.8.6","version_value":"2.8.6"}]}}]},"vendor_name":"Unknown"}]}},"credit":[{"lang":"eng","value":"Mika"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example."}]},"generator":"WPScan CVE Generator","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-434 Unrestricted Upload of File with Dangerous Type"}]}]},"references":{"reference_data":[{"name":"https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd","refsource":"MISC","url":"https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:00:09.712Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-22T15:40:45.891130Z","id":"CVE-2022-3076","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-22T15:41:20.288Z"}}]}}}