cleantalk
Vulnerabilities and Security Researches

Download Manager, 95facb10-514c-45dc-a164-7aa54741513b

Application

Download Manager

Published on
-
Research Description
Download Manager [download-manager] < 3.1.18 WordPress Download Manager &lt; 3.1.18 - Unauthorised Download Duplication The duplicate() method, hooked to the admin_init action did not have any CSRF and authorisation checks, allowing unauthorised users (such as unauthenticated ones) to duplicate arbitrary downloads
Affected versions
max 3.1.18.
Status
vulnerable