Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress 路径遍历漏洞
Vulnerability Description
WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress Plugin CM Download Manager 中存在路径遍历漏洞，该漏洞源于该插件允许授权用户删除任意文件并通过fileName参数的deletescreenshot动作导致拒绝服务。以下产品及版本受到影响：CM Download Manager plugin 2.7.0 for wordpress。
CVSS Information
N/A
Vulnerability Type
N/A