CVE-2024-11740

HIGHNuclei

Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-11740 has a selected CVSS score of 7.3 (high); EIP currently links 1 Nuclei template.

Description

The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Sep 11, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 19, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Download Manager

Browse codename065 / Download Manager

Default status: unaffected

CVE ListThrough 3.3.03affected

download_manager

Browse w3eden / download_manager
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHDownload Manager < 3.3.04 - Unauthenticated Arbitrary Shortcode ExecutionCVSS 7.3

The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Impact

Unauthenticated attackers can execute arbitrary shortcodes which may expose sensitive information or perform unauthorized actions.

Remediation

Update Download Manager plugin to version 3.3.04 or later.

WeaknessesCWE-94
Authorsiamnoooob, rootxharsh, pdresearch
Template tagscvecve2024wordpresswp-plugindownload-managershort-codewpvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CPE: cpe:2.3:a:wpdownloadmanager:download_manager:*:*:*:*:*:wordpress:*:*
https://github.com/advisories/GHSA-cq39-wq4r-hjrj https://plugins.trac.wordpress.org/browser/download-manager/tags/3.3.02/src/Package/Hooks.php#L42 https://plugins.trac.wordpress.org/browser/download-manager/tags/3.3.02/src/Package/views/shortcode-iframe.php#L203 https://www.wordfence.com/threat-intel/vulnerabilities/id/4a7be578-5883-4cd3-963d-bf81c3af2003?source=cve

Source: ProjectDiscovery

References

4