Download Monitor WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Download Monitor plugin for WordPress, affecting all versions through 5.1.10. The issue arises in the 'actions_handler()' and 'bulk_actions_handler()' methods of 'class-dlm-downloads-path.php', where nonce verification is absent. This vulnerability allows unauthenticated attackers to manipulate approved download paths by deleting, disabling, or enabling them, provided they can deceive a site administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the status of download paths, allowing for their deletion, disabling, or enabling without proper authorization.

Reproduction

To reproduce this vulnerability, an attacker must craft a request that exploits the missing nonce verification in the 'actions_handler()' and 'bulk_actions_handler()' methods. This can be done by tricking a site administrator into clicking a link that triggers the forged request, thereby manipulating the approved download paths.

Remediation

Users are advised to update the Download Monitor plugin to version 5.1.11 or later, where this vulnerability has been patched.