Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-60092 EUVD-2025-31308GHSA-pxww-59ph-c5c3

WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability

Published Sep 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.25.

Affected products

VendorProductAffectedFixed
Shahjada Download Manager ≤ 3.3.25 —

References