Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 19/12/2024 Updated: 19/12/2024

Unauthorized Download Exploit in WordPress Download Manager Plugin

The WordPress Download Manager plugin has a vulnerability that lets people download password-protected files without permission. This happens because the checkFilePassword function does not properly validate passwords. All versions up to and including 3.3.03 are affected. Unauthenticated attackers can exploit this issue to get access to files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
codename065 download manager

CWE-285 https://nvd.nist.gov https://www.first.org/epss https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/__/Apply.php#L376 https://www.wordfence.com/threat-intel/vulnerabilities/id/feb915f4-66d6-4f46-949c-5354e414319b?source=cve

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-11768

Vulnerability Summary

References

Vulmon Search

About

Products

Connect