CVE-2022-45354

2024-01-0821:15:08

CWE-200

Patchstack

web.nvd.nist.gov

cve-2022-45354

vulnerability

wpchill

download monitor

nvd

information security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.005

Percentile

77.9%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.

Affected configurations

Nvd

Vulners

Node

wpchilldownload_monitorRange≤4.7.60wordpress

VendorProductVersionCPE
wpchilldownload_monitor*cpe:2.3:a:wpchill:download_monitor:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpchill	download_monitor	*	cpe:2.3:a:wpchill:download_monitor::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "download-monitor",
    "product": "Download Monitor",
    "vendor": "WPChill",
    "versions": [
      {
        "changes": [
          {
            "at": "4.7.70",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.7.60",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]