CVE-2024-32131: WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability
Published May 17, 2024
·Updated
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82.
Affected Software
3 affected components
W3 Download Manager>=n/a<3.2.82
WordPress Download Manager<=3.2.82
W3eden Download Manager Wordpress<3.2.83
Remediation
Information
Update to 3.2.83 or a higher version.
Event History
May 17, 2024
CVE Published
via MITRE·08:18 AM
Data Sourced
via MITRE·08:18 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-32131?
CVE-2024-32131 is classified as a medium severity vulnerability impacting sensitive information exposure.
2
How do I fix CVE-2024-32131?
To fix CVE-2024-32131, upgrade the W3 Download Manager or WordPress Download Manager to the latest version released after 3.2.82.
3
What versions of Download Manager are affected by CVE-2024-32131?
CVE-2024-32131 affects Download Manager versions from n/a through 3.2.82.
4
What type of vulnerability is CVE-2024-32131?
CVE-2024-32131 is a functionality bypass vulnerability that allows unauthorized access to sensitive information.
5
Who is the vendor associated with CVE-2024-32131?
The vendor associated with CVE-2024-32131 is W3 for the Download Manager software.