Download Monitor, CVE-2024-3269

CVE, Research URL: CVE-2024-3269
Home page URL: Security reports for Download Monitor
Application: Download Monitor
Published on: May 30, 2024
Research Description: The Download Monitor plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on the dlm_uninstall_plugin function in all versions up to, and including, 4.9.13. This makes it possible for authenticated attackers to uninstall the plugin and delete its data.
Affected versions: Min -, max 4.9.14.
Status: vulnerable