CVE · Medium

CVE-2024-56217 — Download Manager [download-manager] < 3.3.04

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-56217 Download Manager [download-manager] < 3.3.04 Missing Authorization Medium 4.3 < 3.3.04 3.3.04 2024-12-19

CVE-2024-56217

The Download Manager plugin contains a capability check deficiency that exposes a function to unauthorized use. Attackers who are authenticated with Contributor-level permissions or higher can execute actions they should not have access to perform. This vulnerability affects all versions through 3.3.03 and is corrected in version 3.3.04.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.