WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction
Slug
download-manager
Published
2022-08-03
Title
Download Manager < 3.2.51 - Contributor+ Arbitrary File Deletion
Slug
download-manager
Published
2022-08-04
Title
Download Manager < 3.2.53 - Unauthenticated Reflected Cross-Site Scripting
Slug
download-manager
Published
2022-08-17
Title
Download Manager < 3.2.50 - Contributor+ PHAR Deserialization
Slug
download-manager
Published
2022-08-02
Title
Download Manager < 3.2.49 - Clear Stats & Cache via CSRF
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.49 - Contributor+ Stored Cross-Site Scripting
Slug
download-manager
Published
2022-08-01
Title
Download Manager < 3.2.49 - Multiple CSRF
Slug
download-manager
Published
2022-09-05
Title
Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
Slug
download-manager
Published
2022-12-20
Title
Download Manager < 3.2.62 - Contributor+ Stored XSS
Slug
download-manager
Published
2023-04-10
Title
Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
Slug
download-manager
Published
2022-11-27
Title
Download Manager < 3.2.60 - Reflected XSS
Slug
download-manager
Published
2023-05-08
Title
Download Manager < 3.2.71 - Broken Access Controls
Slug
download-manager
Published
2023-05-12
Title
Download Manager < 3.2.71 - Contributor+ Stored Cross-Site Scripting
Slug
download-manager
Published
2023-11-29
Title
Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
Slug
download-manager
Published
2024-02-28
Title
Download Manager < 3.2.85 - Unauthenticated File Download
Slug
download-manager
Published
2024-02-28
Title
Download Manager < 3.2.86 - Contributor+ Stored XSS
Slug
download-manager
Published
2024-03-16
Title
Download Manager < 3.2.85 - Contributor+ Stored XSS
Slug
download-manager
Published
2024-05-30
Title
Download Manager < 3.2.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
Slug
download-manager
Published
2024-06-04
Title
Download Manager < 3.2.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
Slug
download-manager
Published
2024-06-11
Title
Download Manager < 3.2.94 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
download-manager
Published
2024-06-11
Title
Download Manager < 3.2.87 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
Slug
download-manager
Published
2024-06-12
Title
Download Manager < 3.2.90 - Improper Authorization via protectMediaLibrary
Slug
download-manager
Published
2024-07-30
Title
Download Manager < 3.2.98 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
download-manager
Published
2024-07-30
Title
Download Manager <= 3.2.98 - Admin+ Stored XSS
Slug
download-manager
Published
2024-10-09
Title
Download Manager < 3.3.00 - Contributor+ Stored XSS