Access violation vulnerability in Download Manager 3.3.32

The Download Manager plugin for WordPress has a security vulnerability that allows unauthorized access to important information. This vulnerability exists in all versions up to and including 3.3.32. The issue is caused by a lack of proper authorization and capability checks on the `wpdm_media_access` action. This means that attackers who are logged in with Subscriber-level access or higher can retrieve passwords and access control settings for protected media attachments. They can then use this information to bypass the intended protection and download restricted files.