Get Demo
The Download Manager WordPress plugin before 3.3.07 doesnt prevent directory listing on web servers that dont use htaccess, allowing unauthorized access of files.