CVE-2017-2217

CVE-2017-2217: vulnerability in W3 Eden, Inc. WordPress Download Manager

Published · Updated

Follow this CVE+ Monitor WordPress Download Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
W3 Eden, Inc. · WordPress Download Manager
Related CVEs — W3 Eden, Inc. WordPress Download Manager

In the same product, most dangerous first.

CVE-2017-2216—CVE-2017-2216EPSS 1.4%CVE-2021-34638MEDIUMWordPress Download Manager <= 3.1.24 Authenticated Directory TraversalEPSS 1.3%CVE-2021-34639HIGHWordPress Download Manager <= 3.1.24 Authenticated Arbitrary File UploadEPSS 0.6%