Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how w3eden compares to other vendors in security performance

View Risk Score →

WordPress Download ManagerDownload Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2025-4367

WordPress Download ManagerDownload Manager <= 3.2.98 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-8284

WordPress Download ManagerDownload Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite

Risk 60
Severity
8.1
First published (updated )
CVE-2025-1785

W3eden Download Manager WordpressWordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability

Risk 46
Severity
6.3
First published (updated )
CVE-2024-56217

WordPress Download ManagerDownload Manager < 3.3.03 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-10706
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Download Manager Download ManagerDownload manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files

Risk 28
Severity
5.3
First published (updated )
CVE-2024-11768

WordPress Download ManagerDownload Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution

Risk 53
Severity
7.3
First published (updated )
CVE-2024-11740

WordPress Download ManagerDownload Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 28
Severity
6.4
EPSS
0.07%
First published (updated )
CVE-2024-6208

WordPress Download ManagerDownload Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary

Risk 43
Severity
7.5
First published (updated )
CVE-2024-2098

W3eden Download Manager WordpressDownload Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

Risk 34
Severity
5.4
First published (updated )
CVE-2024-1766
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

W3eden Download Manager WordpressDownload Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes

Risk 28
Severity
6.4
EPSS
0.13%
First published (updated )
CVE-2024-5266

WordPress Download ManagerDownload Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode

Risk 28
Severity
6.4
EPSS
0.07%
First published (updated )
CVE-2024-4160

W3 Download ManagerWordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2024-32131

W3 Eden Download ManagerWordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-29114

WordPress Download ManagerDownload Manager <= 3.2.84 - Missing Authorization

Risk 27
Severity
5.3
First published (updated )
CVE-2023-6785
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

W3eden Download Manager WordpressDownload Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2023-6954

W3eden Download Manager WordpressDownload Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

Risk 31
Severity
7.5
EPSS
0.08%
First published (updated )
CVE-2023-6421

Wpdownloadmanager Wordpress Download Manager WordpressDownload Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 40
Severity
6.4
First published (updated )
CVE-2023-2305

Wpdownloadmanager Download Manager WordpressDownload Manager < 3.2.71 - Broken Access Controls

Risk 38
Severity
6.5
First published (updated )
CVE-2023-1524

Wpdownloadmanager Download Manager WordpressDownload Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

Risk 43
Severity
7.5
First published (updated )
CVE-2023-1809
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Wpdownloadmanager Download Manager WordpressWordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )
CVE-2022-45836

Wpdownloadmanager Wordpress Download Manager WordpressDownload Manager < 3.2.62 - Contributor+ Stored XSS

Risk 34
Severity
5.4
First published (updated )
CVE-2022-4476

Wpdownloadmanager Wordpress Download Manager WordpressDownload Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization

Risk 79
Severity
8.8
First published (updated )
CVE-2022-2436

Wpdownloadmanager Wordpress Download Manager WordpressDownload Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion

Risk 79
Severity
8.8
First published (updated )
CVE-2022-2431

Wpdownloadmanager Wordpress Download Manager WordpressWordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Risk 77
Severity
8.8
First published (updated )
CVE-2022-36288
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Wpdownloadmanager Wordpress Download Manager WordpressWordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Risk 34
Severity
5.4
First published (updated )
CVE-2022-34658

Wpdownloadmanager Wordpress Download Manager WordpressDownload Manager < 3.2.50 - Bypass IP Address Blocking Restriction

Risk 43
Severity
7.5
First published (updated )
CVE-2022-2362

Wpdownloadmanager Wordpress Download Manager WordpressWordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
First published (updated )
CVE-2022-34347

Wpdownloadmanager Wordpress Download Manager WordpressDownload Manager <= 3.2.46 - Contributor+ Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2022-2101

Wpdownloadmanager Download Manager WordpressDownload Manager < 3.2.44 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2022-2168
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203