Threats tagged 'ghsa-jm56-4p8h-2xp7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110948The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify High2026-11-11GCVE DatabaseCVE-2026-110948 A vulnerability in the Download Manager WordPress plugin versions before 3.3.73 and before 7.6.2 allows unauthenticated visitors to download password-protected and role-restricted files. This occurs because the plugin does not verify access permissions before issuing download keys via media-preview renderers, exposing sensitive files to unauthorized users. Report on CVE-2026-110948 Vulnerability #ghsa-jm56-4p8h-2xp7	GCVE Database	2026-11-11

Page 1 of 1