Threats tagged 'ghsa-5vw4-6m45-994c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2025-12177The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the Medium5.3EPSS 0.2%2025-11-08GCVE DatabaseCVE-2025-12177 The Download Manager plugin for WordPress contains a vulnerability in all versions up to and including 3.3.30 where a hardcoded Cron key allows unauthenticated attackers to trigger certain cron jobs. These jobs include deleteExpired() and clearTempDataCPCron(), which can delete expired posts and clear cache data. EPSS 0.2%Report on CVE-2025-12177 Vulnerability CWE-321 #ghsa-5vw4-6m45-994c	GCVE Database	2025-11-08

Page 1 of 1