Information leakage vulnerability in Download Manager 3.3.06

The Download Manager plugin for WordPress has a security issue that affects all versions up to 3.3.06. This is because the plugin does not have any restrictions in place for accessing the direct path where downloaded files are stored. As a result, unauthorized individuals can potentially access files that should be protected by a password, simply by downloading them directly from the directory.