A vulnerability was found in Download Manager Plugin up to 3.3.32 on WordPress. It has been declared as problematic. This affects the function
wpdm_media_access of the component Setting Handler. Executing manipulation can lead to missing authorization.
This vulnerability is tracked as CVE-2025-13498. The attack can be launched remotely. No exploit exists.