PT-2026-26254
CVE-2026-2571
·
Publicado
2026-03-18
·
Atualizado
2026-03-23
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WordPress Download Manager plugin versions up to and including 3.3.49
Description
The Download Manager plugin for WordPress is susceptible to unauthorized data access. A missing capability check on the
reviewUserStatus() function allows authenticated attackers with Subscriber-level access or higher to retrieve sensitive user information. This information includes email addresses, display names, and registration dates.Recommendations
Update WordPress Download Manager plugin to a version later than 3.3.49.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾