WordPress Plugin Vulnerabilities
Download Manager < 3.2.50 - Contributor+ PHAR Deserialization
Description
The plugin does not validate a parameter, which could allow users with a role as low as contributor to perform PHAR deserialisation when a suitable gadget chain is also present
Affects Plugins
Fixed in version 3.2.50
References
Classification
Miscellaneous
Timeline
Publicly Published
2022-08-17 (about 5 months ago)
Added
2022-08-18 (about 5 months ago)
Last Updated
2022-08-18 (about 5 months ago)