CVE-2024-11768

5.3MEDIUM

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up

Published: 12/19/2024Updated: 3/21/2025
View on NVDView on MITRE

Description

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files.

AI AnalysisPowered by AI

Affected Products

w3edendownload_manager

References