Plugin icon

WP-DownloadManager

wp-downloadmanager

Vulnerabilities:

9

Last Updated:

February 13, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-02-17
Title
WP-DownloadManager < 1.69.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter
Fixed in
Fixed in 1.69.1
CVSS
6.5 (medium)
Published
2026-02-17
Title
WP-DownloadManager < 1.69.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter
Fixed in
Fixed in 1.69.1
CVSS
2.7 (low)
Published
2025-09-25
Title
WP-DownloadManager < 1.69 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.69
CVSS
7.2 (high)
Published
2025-06-10
Title
WP-DownloadManager < 1.68.11 - Authenticated (Administrator+) Arbitrary File Read
Fixed in
Fixed in 1.68.11
CVSS
4.9 (medium)
Published
2025-06-10
Title
WP-DownloadManager < 1.68.11 - Admin+ Arbitrary File Deletion
Fixed in
Fixed in 1.68.11
CVSS
5.5 (medium)
Published
2024-09-27
Title
WP-DownloadManager < 1.68.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.68.9
CVSS
6.1 (medium)
Published
2022-01-12
Title
WP-DownloadManager < 1.68.7 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.68.7
CVSS
3.4 (low)
Published
2021-12-28
Title
WP-DownloadManager < 1.68.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.68.7
CVSS
4.8 (medium)
Published
2021-04-13
Title
WP-DownloadManager < 1.68.5 - Server-Side Request Forgery (SSRF)
Fixed in
Fixed in 1.68.5
CVSS
5.3 (medium)