Download Manager, 31742cfb2965f38502dac33371b153129846889a
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jan 19, 2016
- Research Description
- Download Manager [download-manager] < 2.8.8 Download Manager <= 2.8.7 - Privilege Escalation The Download Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.8.7. This is due to unchecked use of the extract() function which makes it possible for authenticated attackers, with subscriber-level permissions and above, to edit user metadata, including their role.
- Affected versions
-
max 2.8.8.
- Status
-
vulnerable