cleantalk
Vulnerabilities and Security Researches

Download Manager, 6a91e3f815451e2e78fe37ca7dd66491b9289998

Application

Download Manager

Published on
Dec 15, 2014
Research Description
Download Manager [download-manager] < 2.7.5 WordPress Download Manager <= 2.7.4 - Remote Code Execution The Download Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.7.4 via the wpdm_ajax_call_exec() function. This allows unauthorized attackers to execute code on the server.
Affected versions
max 2.7.5.
Status
vulnerable