WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-manager
Published
2023-05-12
Title
Download Manager < 3.2.71 - Contributor+ Stored Cross-Site Scripting
Slug
download-manager
Published
2023-11-29
Title
Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
Slug
download-manager
Published
2024-02-28
Title
Download Manager < 3.2.85 - Unauthenticated File Download
Slug
download-manager
Published
2024-02-28
Title
Download Manager < 3.2.86 - Contributor+ Stored XSS
Slug
download-manager
Published
2024-03-16
Title
Download Manager < 3.2.85 - Contributor+ Stored XSS
Slug
download-manager
Published
2024-05-30
Title
Download Manager < 3.2.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
Slug
download-manager
Published
2024-06-04
Title
Download Manager < 3.2.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
Slug
download-manager
Published
2024-06-11
Title
Download Manager < 3.2.94 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
download-manager
Published
2024-06-11
Title
Download Manager < 3.2.87 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
Slug
download-manager
Published
2024-06-12
Title
Download Manager < 3.2.90 - Improper Authorization via protectMediaLibrary
Slug
download-manager
Published
2024-07-30
Title
Download Manager < 3.2.98 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
download-manager
Published
2024-07-30
Title
Download Manager <= 3.2.98 - Admin+ Stored XSS
Slug
download-manager
Published
2024-10-09
Title
Download Manager < 3.3.00 - Contributor+ Stored XSS
Slug
download-manager
Published
2024-11-29
Title
Download Manager < 3.3.03 - Admin+ Stored XSS
Slug
download-manager
Published
2024-12-18
Title
Download Manager < 3.3.04 - Unauthenticated Arbitrary Shortcode Execution
Slug
download-manager
Published
2024-12-18
Title
Download manager < 3.3.04 - Unauthenticated Download of Password-Protected Files
Slug
download-manager
Published
2024-12-19
Title
Download Manager < 3.3.04 - Missing Authorization
Slug
download-manager
Published
2025-02-23
Title
Download Manager < 3.3.07 - Unauthenticated Data Exposure
Slug
download-manager
Published
2025-03-12
Title
Download Manager < 3.3.09 - Authenticated (Author+) Path Traversal to Limited File Overwrite
Slug
download-manager
Published
2025-04-17
Title
Download Manager < 3.3.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
download-manager
Published
2025-04-18
Title
Download Manager < 3.3.13 - Author+ Arbitrary File Deletion
Slug
download-manager
Published
2025-06-18
Title
Download Manager < 3.3.19 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode
Slug
download-manager
Published
2025-09-18
Title
Download Manager < 3.3.24 - Reflected Cross-Site Scripting via `user_ids` Parameter
Slug
download-manager
Published
2025-09-26
Title
Download Manager < 3.3.25 - Cross-Site Request Forgery
Slug
download-manager
Published
2025-09-26
Title
Download Manager < 3.3.26 - Unauthenticated Sensitive Information Exposure