Security Advisory
CVE-2014-9260
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option.