{
 "id": "WPSEC-2026-2300",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2300/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2300/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2300/index.md",
 "title": "Download Manager <= 3.3.74 - Unauthenticated Administrator Name Modification via Refused Registration",
 "description": "The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data via the registration form in all versions up to, and including, 3.3.74, due to the signup handler not checking whether wp_create_user() failed and passing the returned WP_Error to wp_update_user() as the user ID, which WordPress reads as user 1. This makes it possible for unauthenticated attackers, when user registration is enabled, to overwrite the display name, first name and last name of the site's first user, usually the administrator.",
 "plugin": {
  "slug": "download-manager",
  "name": "Download Manager",
  "full_name": "Download Manager",
  "wordpress_org": "https://wordpress.org/plugins/download-manager/",
  "advisories_url": "https://wpsec.com/vuln/plugin/download-manager/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/download-manager"
 },
 "type": "UNKNOWN",
 "cwe": [
  "CWE-754"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "3.3.75",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 3.3.75"
  ]
 },
 "introduced_in": null,
 "fixed_in": "3.3.75",
 "remediation": "Update to 3.3.75 or later.",
 "fix_released": "2026-11-01T17:54:06+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:38:21.297350+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2300/",
  "https://plugins.svn.wordpress.org/download-manager/tags/3.3.75/",
  "https://wordpress.org/plugins/download-manager/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/download-manager",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-11-03"
 }
}