CVE-2023-6421
HIGH NUCLEIWordPress Download Mgr <3.2.83 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-6421. PoCs published by RandomRobbieBF. A Nuclei detection template is also available.
AI-analyzed exploit summary The PoC exploits an unauthenticated password leak vulnerability in Download Manager < 3.2.83 by brute-forcing IDs and extracting download URLs with embedded keys. It sends POST requests to the `/wp-json/wpdm/validate-password` endpoint and checks for valid responses.
Description
The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one.
Exploits (1)
The PoC exploits an unauthenticated password leak vulnerability in Download Manager < 3.2.83 by brute-forcing IDs and extracting download URLs with embedded keys. It sends POST requests to the `/wp-json/wpdm/validate-password` endpoint and checks for valid responses.
Nuclei Templates (1)
html:"wp-content/plugins/download-manager/"
body="wp-content/plugins/download-manager/"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N