Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-63070 EUVD-2025-201959GHSA-7pfq-v66h-xmh2

WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.32.

Affected products

VendorProductAffectedFixed
Shahjada Download Manager ≤ 3.3.32 —

References