Input validation vulnerability in Download Manager 3.1.22

The WordPress Download Manager plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Request Forgery in versions before 3.1.22. This is because the plugin does not have the right security measures in place to protect itself against this type of attack. This means that someone who isn’t authorized to make changes to the plugin settings can do so if they can somehow trick a website administrator into clicking on a link or doing an action.