Security Advisory
CVE-2024-11768
5.3
MEDIUM
Vulnerability Description
The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files.
Published Date
December 19, 2024
Official Source
NIST NVD Advisory