CVE-2024-13126: Download Manager < 3.3.07 - Unauthenticated Data Exposure
Published Mar 16, 2025
·Updated
The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htaccess, allowing unauthorized access of files.
Affected Software
1 affected component
Download Manager Download Manager<3.3.07
Event History
Mar 16, 2025
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-13126?
CVE-2024-13126 has a moderate severity rating due to unauthorized access risks associated with directory listing.
2
How do I fix CVE-2024-13126?
To fix CVE-2024-13126, update the Download Manager WordPress plugin to version 3.3.07 or later.
3
Who is affected by CVE-2024-13126?
Users of the Download Manager WordPress plugin prior to version 3.3.07 are affected by CVE-2024-13126.
4
What does CVE-2024-13126 exploit?
CVE-2024-13126 exploits the lack of directory listing prevention on web servers that do not use .htaccess.
5
What risks does CVE-2024-13126 pose?
CVE-2024-13126 poses risks of unauthorized file access, potentially exposing sensitive information on affected websites.