CVE-2025-1785: Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite
The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.08 via the 'wpdmnewfile' action. This makes it possible for authenticated attackers, with Author-level access and above, to overwrite select file types outside of the originally intended directory, which may cause a denial of service.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1785?
CVE-2025-1785 is considered a high-severity vulnerability due to its potential for authenticated attackers to exploit it.
How do I fix CVE-2025-1785?
To fix CVE-2025-1785, update the WordPress Download Manager plugin to version 3.3.09 or later.
Who is affected by CVE-2025-1785?
CVE-2025-1785 affects all versions of the WordPress Download Manager plugin up to and including 3.3.08.
What exploit does CVE-2025-1785 allow?
CVE-2025-1785 allows authenticated attackers with Author-level access to perform a Directory Traversal attack and overwrite files.
What action is linked to the vulnerability in CVE-2025-1785?
The vulnerability in CVE-2025-1785 is linked to the 'wpdm_newfile' action within the WordPress Download Manager plugin.