WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint. id: CVE-2023-6421 info: name: WordPress Download Manager - File Password Exposure...

Exploit for Insufficiently Protected Credentials in W3Eden Download_Manager

CVE-2023-6421 Download Manager 3.2.83 - Unauthenticated P...

CVE-2023-6421

creationtimestamp| type| source ---|---|--- 2024-01-01 16:26:27+00:00| seen| https://t.me/ctinow/161365 2024-01-02 01:31:16+00:00| seen| https://t.me/cibsecurity/74092 2024-01-08 23:17:25+00:00| seen| https://t.me/ctinow/164698 2024-01-22 13:11:42+00:00| seen| https://t.me/ctinow/171136 2025-04-0...

CVE-2023-6421

The CVE-2023-6421 entry concerns the WordPress Download Manager plugin for WordPress, with versions prior to 3.2.83. The vulnerability exposes download passwords by leaking them when an invalid password is submitted to the plugin’s validate-password API endpoint, enabling unauthenticated attacker...

CVE-2023-6421 Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one...

CVE-2023-6421 Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one...