A vulnerability was found in Download Manager and Payment Form Plugin up to 2.7.13 on WordPress. It has been rated as problematic. Affected by this issue is the function
show
. The manipulation leads to improper control of resource identifiers.
This vulnerability is handled as CVE-2025-3851. The attack may be launched remotely. There is no exploit available.