Download Manager, 95facb10-514c-45dc-a164-7aa54741513b
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Download Manager [download-manager] < 3.1.18 WordPress Download Manager < 3.1.18 - Unauthorised Download Duplication The duplicate() method, hooked to the admin_init action did not have any CSRF and authorisation checks, allowing unauthorised users (such as unauthenticated ones) to duplicate arbitrary downloads
- Affected versions
-
max 3.1.18.
- Status
-
vulnerable