← Database

CVE-2022-2392

MEDIUM CVSS: 6.5 Published: 2022-08-22 Modified: 2026-06-17

Description

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

Affected Platforms

Lana Lana Downloads Manager

Weakness Type

CWE-552

References