CVE-2024-3269

The Download Monitor plugin for WordPress contains a missing capability check in the dlm_uninstall_plugin function affecting versions up to 4.9.13, allowing authenticated attackers with insufficient privileges to uninstall the plugin and remove its associated data. This vulnerability exposes the plugin removal functionality to unauthorized access by logged-in users who lack the proper administrative permissions required to perform such actions.

Based on public CVE data (MITRE/NVD).