Known CVE

WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint.

CVE-2023-6421

Medium2023CVSS 5.3CWE-200

cve2023 · wp · wordpress · wp-plugin · exposure · download-manager · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website