Read the docs

wp-downloadmanager

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

wp-downloadmanager records in CISA KEV

No wp-downloadmanager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Premium Packages - Sell Digital Products Securely 3 records MEDIUM Download Manager 1 record LOW Gutenberg Blocks For Wordpress Download Manager 1 record LOW

Records

1 record in Download Manager · all components

TI-2024-03733 CVE-2024-4001 · GHSA-p7gw-hh3x-x6xm

Cross-site scripting in codename065 Download Manager

Priority LOW 28

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_modal_login_form' shortcode in all versions up to, and including, 3.2.93 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-06-05 No fix listed CWE-79
Open these records in search →