cve/2023/CVE-2023-1809.md

### [CVE-2023-1809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1809)
![](https://img.shields.io/static/v1?label=Product&message=Download%20Manager&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=6.0.0%3C%206.3.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brighgreen)

### Description

The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.

### POC

#### Reference
- https://wpscan.com/vulnerability/57f0a078-fbeb-4b05-8892-e6d99edb82c1

#### Github
No PoCs found on GitHub currently.