CVE Database /
CVE-2026-39676
CVE · Medium
CVE-2026-39676 — Download Manager [download-manager] < 3.3.53
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-39676
|
Download Manager [download-manager] < 3.3.53 |
— |
Medium
5.3
|
< 3.3.53
|
3.3.53 |
2026-02-19 |
—
|
CVE-2026-39676
A security flaw exists in the Download Manager plugin for WordPress, allowing malicious individuals without authentication to execute an unintended operation due to an oversight in capability verification within functions across versions up to 3.3.52. This omission enables unauthorized access and actions.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings