CVE-2022-34347

The Download Manager plugin for WordPress before version 3.2.49 contains a cross-site request forgery vulnerability stemming from inadequate nonce verification in the updateTemplateStatus function. An unauthenticated attacker could exploit this flaw by deceiving a site administrator into clicking a malicious link, allowing the attacker to modify template settings without proper authorization.

Based on public CVE data (MITRE/NVD).