← Back to CVE List

CVE-2024-11768

Published: 2024-12-19T06:15Z
Last Modified: 2025-03-21T19:18Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt