Latest vulnerabilities for "wp download manager"

4.3

First published (updated )

CVE-2024-56217

WP Download ManagerDownload Manager < 3.3.03 - Admin+ Stored XSS

4.8

First published (updated )

CVE-2024-10706

Download manager Download managerDownload manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files

5.3

First published (updated )

CVE-2024-11768

WP Download ManagerDownload Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution

7.3

First published (updated )

CVE-2024-11740

WP Download ManagerDownload Manager < 3.3.00 - Contributor+ Stored XSS

5.4

EPSS

0.04%

First published (updated )

CVE-2024-8444

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WP Download ManagerDownload Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

6.4

EPSS

0.07%

First published (updated )

CVE-2024-6208

WP Download ManagerDownload Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary

7.5

First published (updated )

CVE-2024-2098

WP Download ManagerDownload Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

5.4

First published (updated )

CVE-2024-1766

WP Download ManagerDownload Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes

6.4

EPSS

0.13%

First published (updated )

CVE-2024-5266

WP Download ManagerDownload Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode

6.4

EPSS

0.04%

First published (updated )

CVE-2024-4001

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WP Download ManagerDownload Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode

6.4

EPSS

0.07%

First published (updated )

CVE-2024-4160

W3 Download ManagerWordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability

5.3

First published (updated )

CVE-2024-32131

W3 Eden Download ManagerWordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability

6.5

EPSS

0.04%

First published (updated )

CVE-2024-29114

WP Download ManagerThe Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added…

5.3

First published (updated )

CVE-2023-6785

WP Download ManagerXSS

6.4

First published (updated )

CVE-2023-6954

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WP Download ManagerDownload Manager < 3.2.71 - Broken Access Controls

6.5

First published (updated )

CVE-2023-1524

WP Download ManagerDownload Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

7.5

First published (updated )

CVE-2023-1809

WP Download ManagerWordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

7.1

First published (updated )

CVE-2022-45836

WP Download ManagerDownload Manager < 3.2.44 - Reflected Cross-Site Scripting

6.1

First published (updated )

CVE-2022-2168

WP Download ManagerWordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS

8.8

First published (updated )

CVE-2021-25069

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.