w3 eden
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 19, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Download Manager (Free & Pro) - Unauthenticated Protected File Download via Media Preview Download Key
Download Manager <= 7.5.9 - Unauthenticated Stored Cross-Site Scripting via Registration Form (WP_Error-as-ID) via Spotlight Template [author_name]
Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter
Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode
Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon
Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription
WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability
WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability
WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability
WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability
Monitor w3 eden in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.