CVE-2025-15364 | Download Manager Plugin up to 3.3.40 on WordPress updatePassword Remote Code Execution

A vulnerability was found in Download Manager Plugin up to 3.3.40 on WordPress. It has been classified as critical. Affected is the function updatePassword. This manipulation causes Remote Code Execution.

This vulnerability is tracked as CVE-2025-15364. The attack is possible to be carried out remotely. No exploit exists.