High severity7.5NVD Advisory· Published Aug 8, 2022· Updated Jun 17, 2026

CVE-2022-2367

Description

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Apk Downloadercpe-rescue
Package: https://wordpress.org/plugins/apk-downloader
WordPress/WSM Downloaderllm-fuzzy
Range: <=1.4.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/46afb0c6-2d0c-4a20-a9de-48f35ca93f0fnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000