CVE-2024-13126

Download Manager < 3.3.07 - Unauthenticated Data Exposure PUBLISHED

Description (CNA)

The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htaccess, allowing unauthorized access of files.

Affected (CNA)

Vendor / product	Versions
Unknown / Download Manager	affected 0 before 3.3.07

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c2c69a44-4ecc-41d1-a10c-cfe9c875b803/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.