CVE Database /
CVE-2023-6421
CVE · High
CVE-2023-6421 — Download Manager [download-manager] < 3.2.83
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6421
|
Download Manager [download-manager] < 3.2.83 |
Insufficiently Protected Credentials |
High
7.5
|
< 3.2.83
|
3.2.83 |
2023-11-29 |
—
|
CVE-2023-6421
The Download Manager plugin for WordPress up to version 3.2.82 contains an information exposure vulnerability that reveals passwords for protected files when an incorrect password is submitted. This flaw allows unauthenticated users to discover the correct password and access files that should be restricted. The vulnerability affects all versions prior to 3.2.83.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings