Download Manager, d4451caae529c7afd19fe3b86e0b1e84960afd50

CVE, Research URL: d4451caae529c7afd19fe3b86e0b1e84960afd50
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Aug 09, 2021
Research Description: Download Manager [download-manager] < 3.2.13 WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery The WordPress Download Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.12. This is due to missing or incorrect nonce validation on the preview() function. This makes it possible for unauthenticated attackers to save the plugins email settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 3.2.13.
Status: vulnerable