CVE-2022-1585: Project-Source-Code-Download Project Project-Source-Code-Download

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.

Affected products

Published 2022-08-01. Last modified 2026-06-17.