WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-manager
Published
2021-04-30
Title
Download Manager < 3.1.19 - Authenticated (author+) PHP4 File Upload to RCE
Slug
download-manager
Published
2021-07-29
Title
WordPress Download Manager < 3.1.25 - Authenticated File Upload
Slug
download-manager
Published
2021-07-29
Title
WordPress Download Manager < 3.1.25 - Authenticated Directory Traversal
Slug
download-manager
Published
2021-08-09
Title
WordPress Download Manager < 3.2.13 - Email Template Setting Update via CSRF
Slug
download-manager
Published
2021-09-29
Title
WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting
Slug
download-manager
Published
2021-11-29
Title
Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site Scripting
Slug
download-manager
Published
2022-01-20
Title
WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS
Slug
download-manager
Published
2022-02-02
Title
Wordpress Download Manager < 3.2.35 - Sensitive Information Disclosure
Slug
download-manager
Published
2022-03-16
Title
Download Manager < 3.2.39 - Unauthenticated brute force of files master key
Slug
download-manager
Published
2022-06-02
Title
Download manager < 3.2.43 - Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-06-22
Title
Download Manager < 3.2.48 - Contributor+ Stored Cross-Site Scripting
Slug
download-manager
Published
2022-06-27
Title
Download Manager < 3.2.44 - Unauthenticated Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-06-27
Title
Download Manager < 3.2.44 - Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction
Slug
download-manager
Published
2022-08-03
Title
Download Manager < 3.2.51 - Contributor+ Arbitrary File Deletion
Slug
download-manager
Published
2022-08-04
Title
Download Manager < 3.2.53 - Unauthenticated Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-08-17
Title
Download Manager < 3.2.50 - Contributor+ PHAR Deserialization
Slug
download-manager
Published
2022-08-02
Title
Download Manager < 3.2.49 - Clear Stats & Cache via CSRF
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.49 - Contributor+ Stored Cross-Site Scripting
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.49 - Multiple CSRF
Slug
download-manager
Published
2022-09-05
Title
Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
Slug
download-manager
Published
2022-12-20
Title
Download Manager < 3.2.62 - Contributor+ Stored XSS
Slug
download-manager
Published
2023-04-10
Title
Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
Slug
download-manager
Published
2022-11-27
Title
Download Manager < 3.2.60 - Reflected XSS
Slug
download-manager
Published
2023-05-08
Title
Download Manager < 3.2.71 - Broken Access Controls