Access violation vulnerability in Download Manager 3.1.23

The WordPress Download Manager plugin for WordPress is vulnerable to a security issue in versions before 3.1.23. This issue makes it possible for an attacker with low level privileges to perform unauthorized actions. This is because the same security code is used for multiple AJAX actions, so the attacker can find the code and use it to access restricted areas.

Detected in:

Download Manager fixed vulnerable versions: >= * < 3.1.23
Download Manager Pro fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.