CVE-2022-2357: Wsm Downloader Project Wsm Downloader

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php.

Affected products

• Wsm Downloader Project Wsm Downloader: up to and including 1.4.0

Published 2022-08-08. Last modified 2026-06-17.