WP-DownloadManager Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the WP-DownloadManager plugin for WordPress, affecting all versions through 1.68.11. The issue arises from inadequate file type validation in the download-add.php file, which enables authenticated attackers with Administrator-level access to upload arbitrary files to the server. This vulnerability could potentially lead to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, which may be used to execute malicious code on the server.

Reproduction

To reproduce this vulnerability, an authenticated user with Administrator-level access can upload files through the WP-DownloadManager plugin's file upload feature. The absence of proper file type validation allows for the upload of potentially dangerous files that could be executed on the server.

Remediation

Users are advised to update the WP-DownloadManager plugin to version 1.69 or later.