cleantalk
Vulnerabilities and Security Researches

Download Manager, 115a6fd3-a723-4167-a9a3-379871f13fcb

Application

Download Manager

Published on
-
Research Description
Download Manager [download-manager] < 3.2.13 WordPress Download Manager &lt; 3.2.13 - Email Template Setting Update via CSRF The plugin did not have CSRF check in place before saving its Email Template setting, allowing attackers to make a logged in admin change them via a CSRF attack
Affected versions
max 3.2.13.
Status
vulnerable