WordPress Download Manager version detection wrong

Vulnerability Tests
1

The current versions (3.2.43 and most likely the previous versions as well) of WordPress Download Manager (https://wordpress.org/plugins/download-manager/) were wrongly detected as version 3.1.12. As far as I can tell this affects the following nasl/NVT OIDs:

  • 1.3.6.1.4.1.25623.1.0.147729
  • 1.3.6.1.4.1.25623.1.0.124061
  • 1.3.6.1.4.1.25623.1.0.147827
  • 1.3.6.1.4.1.25623.1.0.147728
  • 1.3.6.1.4.1.25623.1.0.147157

I could not yet pinpoint where the detection fails. I’ll update the post if I find out.

2

Hi,

Thanks for the report. The mentioned VTs are not causing the problem but rather the detection of the plugin itself.

The detection will be updated accordingly and should arrive in one of the next feed updates.
Let us know if this solves the problem.

Chris

1 Like