Sunnatillo Abdivasiyev

**Name of the Vulnerable Software and Affected Versions** WP-DownloadManager plugin for WordPress versions prior to 1.70 **Description** The WP-DownloadManager plugin for WordPress is susceptible to a Path Traversal issue due to inadequate validation of the `download path` configuration parameter. This allows attackers with Administrator-level access or higher to bypass the WP CONTENT DIR prefix check and potentially access arbitrary files on the server through the file browser functionality. The issue exists because of insufficient validation of the download path setting. **Recommendations** Update the WP-DownloadManager plugin to version 1.70 or later.

**Name of the Vulnerable Software and Affected Versions** WP-DownloadManager versions prior to 1.69 **Description** The WP-DownloadManager plugin for WordPress is susceptible to a Path Traversal issue due to inadequate validation of file paths provided by users. This affects the file deletion functionality, specifically through the `file` parameter. Successful exploitation allows authenticated attackers with Administrator-level access or higher to delete arbitrary files on the server. Deletion of critical files, such as `wp-config.php`, could lead to remote code execution. **Recommendations** Update WP-DownloadManager to a version newer than 1.69.

**Name of the Vulnerable Software and Affected Versions** WP-DownloadManager plugin for WordPress versions prior to 1.68.12 **Description** The WP-DownloadManager plugin for WordPress is susceptible to unrestricted file uploads because of a lack of file type validation within the `download-add.php` file. This allows attackers with Administrator-level access or higher to upload arbitrary files to the server, potentially leading to remote code execution. **Recommendations** Update the WP-DownloadManager plugin to version 1.68.12 or later.