Vendors / Wp-downloadmanager Project Wp-downloadmanager Project Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Wp-downloadmanager Project records in CISA KEV No Wp-downloadmanager Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, and including, 1.68.10.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01013 · Published 2025-06-11 · No fix listed CWE-36
Priority LOW 26
Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote parameter to download-…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00933 · Published 2021-07-07 · No fix listed CWE-918
Priority LOW 25
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6).
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00566 · Published 2022-03-25 · No fix listed CWE-79
Priority LOW 25
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6).
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00563 · Published 2022-03-18 · No fix listed CWE-79
Priority LOW 25
Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00544 · Published 2022-03-18 · No fix listed CWE-79
Priority LOW 23
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00439 · Published 2025-06-11 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
0 1 5 0 0
THREATIST.IORead the docs