CVE-2026-94405

Published: Ott 02, 2026 Last Modified: Ott 02, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,3

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: low

Integrity: none

Availability: none

AI Translation Available

Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data.

This issue affects Download Manager: from n/a through 3.3.71.

639

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Access Control

Potential Impacts:

Bypass Protection Mechanism Gain Privileges Or Assume Identity

All platforms may be affected

Likelihood of Exploit: High

https://patchstack.com/database/wordpress/plugin/download-manager/vulnerability…