CVE-2022-2367: Wsm Downloader Project Wsm Downloader

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

Affected products

• Wsm Downloader Project Wsm Downloader: up to and including 1.4.0

Published 2022-08-08. Last modified 2026-06-17.