blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-1585

HIGH 7.5 CVSS 3.1
Published
August 1, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-552
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown WordPress project source code download — From 1.0.0 (including) to 1.0.0 (including)
  • project-source-code-download_project project-source-code-download — Version 1.0.0

References

  • wpscan.com https://wpscan.com/vulnerability/e709958c-7bce-45d7-9a0a-6e0ed12cd03f Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record