CVE-2024-32131CWE-200

WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability

Medium · published May 17, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-05-17T08:18Z
EPSS history
Timeline
  • 17 MAY 08:18Z
    WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability
    cvelistv5