WordPress Download Manager plugin versions 3.2.50 and below suffer from an arbitrary file deletion vulnerability.