Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WordPress Download Manager Open Redirect - CVE-2017-2217 - Vulnerability Database
WP Plugin Download Manager

WordPress Plugin WordPress Download Manager Open Redirect - CVE-2017-2217

Medium
Reference: CVE-2017-2217
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-2217
Title: WordPress Plugin WordPress Download Manager Open Redirect
Overview:

WordPress Plugin WordPress Download Manager is prone to an open redirect vulnerability because the application fails to properly verify user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks other attacks are also possible. WordPress Plugin WordPress Download Manager version 2.9.50 is vulnerable prior versions are also affected.