Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-32164 EUVD-2025-10260GHSA-7wj9-rggf-4prj

WordPress m1.DownloadList plugin <= 0.24 - Sensitive Data Exposure vulnerability

Published Apr 8, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows Retrieve Embedded Sensitive Data.This issue affects m1.DownloadList: from n/a through <= 0.24.

Affected products

VendorProductAffectedFixed
maennchen1.de m1.DownloadList ≤ 0.24 —

References