Access violation vulnerability in Download Manager 3.2.70

The Download Manager plugin for WordPress is vulnerable to a security issue in versions 3.2.7.0 or earlier. This plugin allows users to create posts or files that can be protected with a password. Unfortunately, the plugin does not properly validate the passwords for these posts or files, meaning that authenticated attackers with access to the downloads area can use the password and a master key to access any other password-protected post or file.