WP-DownloadManager Arbitrary File Read Vulnerability for WordPress

A vulnerability allowing arbitrary file read has been identified in the WP-DownloadManager plugin for WordPress, affecting all versions through 1.68.10. The issue arises from insufficient restrictions on the directory an administrator can choose for storing downloads. This flaw enables authenticated attackers with Administrator-level access or higher to download and access any file on the server, including sensitive system and configuration files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, potentially including system and configuration files.

Remediation

Users are advised to update the WP-DownloadManager plugin to version 1.68.11 or a newer patched version.