vulnerability

WordPress Plugin: download-manager: CVE-2017-2217: URL Redirection to Untrusted Site ('Open Redirect')

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Jul 13, 2017
Added
May 15, 2025
Modified
May 15, 2025

Description

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Solution

download-manager-plugin-cve-2017-2217
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.