CVE-2024-11768

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download...

CVE-2024-11768

creationtimestamp| type| source ---|---|--- 2024-12-19 05:31:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113677846740743284 2024-12-19 08:57:55+00:00| seen| https://t.me/cvedetector/13309 2025-01-29 21:18:17+00:00| published-proof-of-concept|...

CVE-2024-11768 Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download...