WordPress Plugin Vulnerabilities

Download Manager <= 2.8.7 - Multiple Vulnerabilities

Description

Numerous vulnerabilities with WordPress Download Manager free and pro versions. Privilege escalation, directory listing and unauthorised file download.

Affects Plugins

Plugin icon
download-manager
Fixed in 2.8.8

References

URL
https://www.pritect.net/blog/wordpress-download-manager-2-8-8-critical-security-vulnerabilities
URL
http://www.wpdownloadmanager.com/wordpress-download-manager-security-maintenance-release/

Miscellaneous

Submitter
James Golovich
Submitter website
http://pritect.net
Submitter twitter
Pritect
Verified
No
WPVDB ID
ea09b240-6add-4278-9a15-5b9e356ebd3c

Timeline

Publicly Published
2016-01-19 (about 10 years ago)
Added
2016-01-19 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2015-03-28
Title
Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download
Published
2015-01-16
Title
CM Download Manager < 2.0.7 - CSRF to Cross-Site Scripting
Published
2014-08-12
Title
Disqus <= 2.75 - Cross-Site Scripting (XSS) & CSRF
Published
2014-08-01
Title
Comment Rating 2.9.23 - Multiple Vulnerabilities
Published
2014-08-01
Title
dmsguestbook 1.7.0 - Multiple Remote Vulnerabilities