The Download Manager plugin for WordPress contains a security issue that makes it possible for people with administrator-level access to the blog to view and read any file or folder that is not part of the blog directory. This security issue affects versions of the plugin up to and including version 3.2.54 and is related to the File Browser Root field.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
