cleantalk
Vulnerabilities and Security Researches

Download Manager, 2dbefbf8b0b9f63fcb15ce856bdbeb59159cb13d

Application

Download Manager

Published on
Dec 15, 2014
Research Description
Download Manager [download-manager] >= 2.7.0 - <= 2.7.4 WordPress Download Manager 2.7.4 - Remote Code Execution Download Manager plugin is prone to a remote code execution vulnerability via "/download-manager/wpdm-core.php". It allows attackers to execute arbitrary PHP code. Upgrade the plugin.
Affected versions
Min 2.7.0, max 2.7.4.
Status
vulnerable