CVE-2024-2098

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected fil...

WordPress Download Manager plugin <= 3.2.89 - Improper Authorization via protectMediaLibrary vulnerability

Improper Authorization via protectMediaLibrary vulnerability discovered by m1tz in WordPress Plugin Download Manager versions = 3.2.89...