The Download Manager WordPress plugin prior to 6.3.0 leaks master key information without the need for a password, allowing malicious users to download arbitrary password-protected package files.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wpdownloadmanager download manager |