CVE-2021-34638: WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal
Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a file containing configuration information or an uploaded JavaScript with an image extension This issue affects: WordPress Download Manager version 3.1.24 and prior versions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34638?
CVE-2021-34638 is classified as a medium severity vulnerability.
How do I fix CVE-2021-34638?
To fix CVE-2021-34638, update the WordPress Download Manager plugin to the latest version beyond 3.1.24.
What type of attacks can CVE-2021-34638 facilitate?
CVE-2021-34638 can facilitate directory traversal attacks and XSS attacks for authenticated users.
Who is affected by CVE-2021-34638?
Authenticated users with Contributor roles and above are affected by the vulnerabilities in CVE-2021-34638.
What can an attacker gain from exploiting CVE-2021-34638?
Exploiting CVE-2021-34638 allows attackers to access sensitive configuration file information and perform cross-site scripting attacks.