CVE-2024-13126

Download Manager < 3.3.07 - Unauthenticated Data Exposure

Medium · published March 16, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htaccess, allowing unauthorized access of files.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00482 · 40.6th percentile
Published
2025-03-16T06:00Z
EPSS history
Timeline
  • 16 MAR 06:00Z
    Download Manager < 3.3.07 - Unauthenticated Data Exposure
    cvelistv5