CVE-2022-2392: Lana Downloads Manager

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

Affected products

• Lana Lana Downloads Manager: before 1.8.0 (fixed in 1.8.0)

Published 2022-08-22. Last modified 2026-06-17.