WPChill Download Monitor Plugin up to 4.7.60 on WordPress information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in WPChill Download Monitor Plugin up to 4.7.60 on WordPress. Impacted is an unknown function. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2022-45354. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in WPChill Download Monitor Plugin up to 4.7.60 on WordPress (WordPress Plugin). It has been classified as problematic. This affects some unknown functionality. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.

The weakness was published 01/08/2024 by Rafie Muhammad. It is possible to read the advisory at patchstack.com. This vulnerability is uniquely identified as CVE-2022-45354 since 11/14/2022. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• WordPress Plugin

Vendor

• WPChill

Name

• Download Monitor Plugin

Version

• 4.7.0
• 4.7.1
• 4.7.2
• 4.7.3
• 4.7.4
• 4.7.5
• 4.7.6
• 4.7.7
• 4.7.8
• 4.7.9
• 4.7.10
• 4.7.11
• 4.7.12
• 4.7.13
• 4.7.14
• 4.7.15
• 4.7.16
• 4.7.17
• 4.7.18
• 4.7.19
• 4.7.20
• 4.7.21
• 4.7.22
• 4.7.23
• 4.7.24
• 4.7.25
• 4.7.26
• 4.7.27
• 4.7.28
• 4.7.29
• 4.7.30
• 4.7.31
• 4.7.32
• 4.7.33
• 4.7.34
• 4.7.35
• 4.7.36
• 4.7.37
• 4.7.38
• 4.7.39
• 4.7.40
• 4.7.41
• 4.7.42
• 4.7.43
• 4.7.44
• 4.7.45
• 4.7.46
• 4.7.47
• 4.7.48
• 4.7.49
• 4.7.50
• 4.7.51
• 4.7.52
• 4.7.53
• 4.7.54
• 4.7.55
• 4.7.56
• 4.7.57
• 4.7.58
• 4.7.59
• 4.7.60

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion