WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-manager
Published
2016-01-19
Title
Download Manager <= 2.8.7 - Multiple Vulnerabilities
Slug
download-manager
Published
2017-03-01
Title
Download Manager <= 2.9.45 - Cross-Site Request Forgery (CSRF)
Slug
download-manager
Published
2017-06-16
Title
Download Manager <= 2.9.51 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
download-manager
Published
2017-07-13
Title
Download Manager <= 2.9.49 - Cross-Site Scripting (XSS)
Slug
download-manager
Published
2017-07-13
Title
Download Manager <= 2.9.50 - Open Redirect
Slug
download-manager
Published
2018-01-09
Title
Download Manager <= 2.9.60 - Cross-Site Request Forgery (CSRF)
Slug
download-manager
Published
2019-04-17
Title
Download Manager <= 2.9.93 - Authenticated Cross-Site Scripting (XSS)
Slug
download-manager
Published
2019-06-09
Title
Download Manager <= 2.9.96 - Various Sanitisation Issues
Slug
download-manager
Published
2021-04-17
Title
WordPress Download Manager < 3.1.18 - Unauthorised Download Duplication
Slug
download-manager
Published
2021-04-30
Title
Download Manager < 3.1.23 - Unauthorised Asset Manager Usage
Slug
download-manager
Published
2021-04-30
Title
Download Manager < 3.1.22 - Plugin Settings Change via CSRF
Slug
download-manager
Published
2021-04-30
Title
Download Manager < 3.1.19 - Authenticated (author+) PHP4 File Upload to RCE
Slug
download-manager
Published
2021-07-29
Title
WordPress Download Manager < 3.1.25 - Authenticated File Upload
Slug
download-manager
Published
2021-07-29
Title
WordPress Download Manager < 3.1.25 - Authenticated Directory Traversal
Slug
download-manager
Published
2021-08-09
Title
WordPress Download Manager < 3.2.13 - Email Template Setting Update via CSRF
Slug
download-manager
Published
2021-09-29
Title
WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting
Slug
download-manager
Published
2021-11-29
Title
Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site Scripting
Slug
download-manager
Published
2022-01-20
Title
WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS
Slug
download-manager
Published
2022-02-02
Title
Wordpress Download Manager < 3.2.35 - Sensitive Information Disclosure
Slug
download-manager
Published
2022-03-16
Title
Download Manager < 3.2.39 - Unauthenticated brute force of files master key
Slug
download-manager
Published
2022-06-02
Title
Download manager < 3.2.43 - Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-06-22
Title
Download Manager < 3.2.48 - Contributor+ Stored Cross-Site Scripting
Slug
download-manager
Published
2022-06-27
Title
Download Manager < 3.2.44 - Unauthenticated Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-06-27
Title
Download Manager < 3.2.44 - Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction