Skip to content
OpenAdvisories

Vendor

download-manager

1 known vulnerabilities.

Products

Download Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2022-2431

    Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion

    The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion in versions up to, and including 3.2.50. This is due to insufficient file type and path validation on the deleteFiles() function found in the ~/Admin/Menu/Packages.php file tha…

    download-manager Download Manager Web / CMS