dFactory Download Attachments Plugin Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the dFactory Download Attachments WordPress plugin, specifically in versions through 1.3.1. This vulnerability allows for exploitation of incorrectly configured access control security levels, leading to insecure direct object references (IDOR).

Impact

Exploitation of this vulnerability could bypass authorization and access sensitive files or data, taking advantage of the flawed access control in the affected plugin.

Remediation

Users are advised to remove and replace the dFactory Download Attachments WordPress plugin, as it is likely abandoned and will not receive further updates or fixes.