Download Manager, 1409f1212928d045f22001ff52b340f183d13670

CVE, Research URL: 1409f1212928d045f22001ff52b340f183d13670
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Jan 19, 2016
Research Description: Download Manager [download-manager] < 2.8.8 Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing The Download Manager plugin for WordPress is vulnerable to Directory Listing in versions up to, and including, 2.8.7. This is due to the 'wpdm_dir_tree()' function being called during the 'init' action. This makes it possible for unauthenticated attackers to read all of the files listed in that directory.
Affected versions: max 2.8.8.
Status: vulnerable