What’s Vulnerable › Vulnerabilities

CVE-2022-1585: Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-01 · updated 2026-06-17
• Weakness: CWE-552

Description

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php.

Affected products

• WordPress project source code download: 1.0.0

References

• https://wpscan.com/vulnerability/e709958c-7bce-45d7-9a0a-6e0ed12cd03f
• https://wpscan.com/vulnerability/e709958c-7bce-45d7-9a0a-6e0ed12cd03f

Get alerted when CVE-2022-1585 or the next vulnerability affects your stack