WordPress Plugin Vulnerabilities

Download Manager < 3.2.83 - Unauthenticated Password Protected File Bypass

Description

The plugin is vulnerable to information disclosure, allowing unauthenticated attackers to bypass password protected file restrictions

Affects Plugins

Plugin icon
downloadmanager
Fixed in 3.2.83

References

CVE
CVE-2024-32131
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/38fd8881-94f6-4330-a519-7582e253e057

Miscellaneous

Original Researcher
Liu Shaohong
Verified
No
WPVDB ID
06923186-4a0e-4400-8b19-5b6710037833

Timeline

Publicly Published
2024-04-12 (about 2 years ago)
Added
2024-04-18 (about 2 years ago)
Last Updated
2024-04-18 (about 2 years ago)

Other

Published
Title
Published
2015-06-12
Title
Zip Attachments < 1.5 - Arbitrary File Download
Published
2020-04-29
Title
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Published
2015-05-02
Title
Slideshow 2.2.8-2.2.21 - Option Value Disclosure
Published
2014-09-22
Title
Wordfence 5.2.3 - Banned IP Functionality Bypass
Published
2025-07-24
Title
Timber < 1.23.3 - Use of a Vulnerable Dependency