Download Monitor, c996842b5799f2226e6f8eaefa8141467ad4bf5c

CVE, Research URL: c996842b5799f2226e6f8eaefa8141467ad4bf5c
Home page URL: Security reports for Download Monitor
Application: Download Monitor
Published on: Mar 08, 2015
Research Description: Download Monitor [download-monitor] < 1.6.4 Download Monitor <= 1.6.3 - Directory Listing to Information Disclosure The Download Monitor plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.6.3 via the 'dir' parameter. This can allow authenticated attackers to extract sensitive data including directories and otherwise restricted server-side filenames.
Affected versions: max 1.6.4.
Status: vulnerable