WP-DownloadManager <= 1.69 - Authentifiziert (Administrator+) Pfadüberschreitung zum Lesen beliebiger Dateien über den Parameter 'download_path'

The Path Traversal vulnerability in WP-DownloadManager allows an authenticated administrator to bypass security controls and access files outside of the intended download directory. By crafting malicious directory traversal sequences within the 'download_path' setting, an attacker can potentially read sensitive configuration files, source code, or other critical data stored on the server. This could lead to information disclosure, privilege escalation, or even remote code execution if the attacker can access files containing executable code. The impact is amplified if the server stores sensitive data in plain text or if the attacker can leverage the accessed files to compromise other systems.

1. Reserviert2026-02-12
2. Veröffentlicht2026-02-18
3. Geändert2026-04-08
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2026-2419 is to immediately update the WP-DownloadManager plugin to version 1.69.1 or later. If upgrading is not immediately feasible, consider restricting administrator access to the plugin's configuration settings. Implement a Web Application Firewall (WAF) rule to block requests containing directory traversal sequences (e.g., '../') in the 'downloadpath' parameter. Regularly review file permissions and ensure that sensitive files are not accessible to the web server user. After upgrading, confirm the fix by attempting to access a file outside the intended download directory using a directory traversal sequence in the 'downloadpath' parameter; the request should be denied.

Aktive Installationen

3KNische

Plugin-Bewertung