CVE-2025-60092
WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.25.
| CWE | CWE-497 |
| Vendor | shahjada |
| Product | download manager |
| Published | Sep 26, 2025 |
| Last Updated | Apr 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for shahjada download manager
Be the first to know when new unknown vulnerabilities affecting shahjada download manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Shahjada / Download Manager
0 ≤ 3.3.25
References
Credits
Ananda Dhakal (Patchstack)