Download Manager, dcd868a17d34d1cc7c03e424780d2c8efb3bb492

CVE, Research URL: dcd868a17d34d1cc7c03e424780d2c8efb3bb492
Home page URL: Security reports for Download Manager
Application: Download Manager
Published on: Jun 27, 2017
Research Description: Download Manager [download-manager] < 2.9.46 WordPress Download Manager plugin <= 2.8.97 - Authenticated Arbitrary File Upload Vulnerability Authenticated Arbitrary File Upload Vulnerability exsists in WordPress WordPress Download Manager plugin <= 2.8.97 . It doesn't check what type of files you can upload so an attacker can upload .PHP files. Update the plugin.
Affected versions: max 2.9.46.
Status: vulnerable