Read the docs
TI-2014-07050 Aliases CVE-2014-8585GHSA-482j-63pf-fmxq

Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress…

Priority LOW 28CWE-59Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-59 and the CVSS impact.

Summary

Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the fname parameter to (1) views/file_download.php or (2) file_download.php.

Why it matters now

EPSS 0.0285 86th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 104

CPEVersionsRoleVendor
cpe:2.3:a:w3eden:download_manager:1.1:*:*:*:*:wordpress:*:*1.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.2:*:*:*:*:wordpress:*:*1.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.2.1:*:*:*:*:wordpress:*:*1.2.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.2.2:*:*:*:*:wordpress:*:*1.2.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.2.3:*:*:*:*:wordpress:*:*1.2.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.2.4:*:*:*:*:wordpress:*:*1.2.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.2.5:*:*:*:*:wordpress:*:*1.2.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.3:*:*:*:*:wordpress:*:*1.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.4:*:*:*:*:wordpress:*:*1.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.5:*:*:*:*:wordpress:*:*1.5Vulnerablecodename065
  • cpe:2.3:a:w3eden:download_manager:1.1:*:*:*:*:wordpress:*:* Versions 1.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.2:*:*:*:*:wordpress:*:* Versions 1.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.2.1:*:*:*:*:wordpress:*:* Versions 1.2.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.2.2:*:*:*:*:wordpress:*:* Versions 1.2.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.2.3:*:*:*:*:wordpress:*:* Versions 1.2.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.2.4:*:*:*:*:wordpress:*:* Versions 1.2.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.2.5:*:*:*:*:wordpress:*:* Versions 1.2.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.3:*:*:*:*:wordpress:*:* Versions 1.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.4:*:*:*:*:wordpress:*:* Versions 1.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.5:*:*:*:*:wordpress:*:* Versions 1.5 Vulnerable ·codename065
Show 94 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:w3eden:download_manager:1.5.1:*:*:*:*:wordpress:*:*1.5.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.5.2:*:*:*:*:wordpress:*:*1.5.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.5.3:*:*:*:*:wordpress:*:*1.5.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.5.9:*:*:*:*:wordpress:*:*1.5.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.5.32:*:*:*:*:wordpress:*:*1.5.32Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:1.5.33:*:*:*:*:wordpress:*:*1.5.33Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.1:*:*:*:*:wordpress:*:*2.0.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.2:*:*:*:*:wordpress:*:*2.0.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.3:*:*:*:*:wordpress:*:*2.0.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.4:*:*:*:*:wordpress:*:*2.0.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.5:*:*:*:*:wordpress:*:*2.0.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.6:*:*:*:*:wordpress:*:*2.0.6Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.7:*:*:*:*:wordpress:*:*2.0.7Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.8:*:*:*:*:wordpress:*:*2.0.8Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.9:*:*:*:*:wordpress:*:*2.0.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.10:*:*:*:*:wordpress:*:*2.0.10Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.11:*:*:*:*:wordpress:*:*2.0.11Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.12:*:*:*:*:wordpress:*:*2.0.12Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.13:*:*:*:*:wordpress:*:*2.0.13Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.14:*:*:*:*:wordpress:*:*2.0.14Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.15:*:*:*:*:wordpress:*:*2.0.15Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.16:*:*:*:*:wordpress:*:*2.0.16Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.17:*:*:*:*:wordpress:*:*2.0.17Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.18:*:*:*:*:wordpress:*:*2.0.18Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.0.19:*:*:*:*:wordpress:*:*2.0.19Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.1.0:*:*:*:*:wordpress:*:*2.1.0Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.1.1:*:*:*:*:wordpress:*:*2.1.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.1.2:*:*:*:*:wordpress:*:*2.1.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.1.3:*:*:*:*:wordpress:*:*2.1.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.0:*:*:*:*:wordpress:*:*2.2.0Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.1:*:*:*:*:wordpress:*:*2.2.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.2:*:*:*:*:wordpress:*:*2.2.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.3:*:*:*:*:wordpress:*:*2.2.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.4:*:*:*:*:wordpress:*:*2.2.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.5:*:*:*:*:wordpress:*:*2.2.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.6:*:*:*:*:wordpress:*:*2.2.6Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.7:*:*:*:*:wordpress:*:*2.2.7Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.8:*:*:*:*:wordpress:*:*2.2.8Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.2.9:*:*:*:*:wordpress:*:*2.2.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.0:*:*:*:*:wordpress:*:*2.3.0Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.1:*:*:*:*:wordpress:*:*2.3.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.2:*:*:*:*:wordpress:*:*2.3.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.3:*:*:*:*:wordpress:*:*2.3.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.4:*:*:*:*:wordpress:*:*2.3.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.5:*:*:*:*:wordpress:*:*2.3.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.6:*:*:*:*:wordpress:*:*2.3.6Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.7:*:*:*:*:wordpress:*:*2.3.7Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.8:*:*:*:*:wordpress:*:*2.3.8Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.3.9:*:*:*:*:wordpress:*:*2.3.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.0:*:*:*:*:wordpress:*:*2.4.0Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.1:*:*:*:*:wordpress:*:*2.4.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.2:*:*:*:*:wordpress:*:*2.4.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.3:*:*:*:*:wordpress:*:*2.4.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.4:*:*:*:*:wordpress:*:*2.4.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.5:*:*:*:*:wordpress:*:*2.4.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.6:*:*:*:*:wordpress:*:*2.4.6Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.7:*:*:*:*:wordpress:*:*2.4.7Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.8:*:*:*:*:wordpress:*:*2.4.8Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.4.9:*:*:*:*:wordpress:*:*2.4.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.0:*:*:*:*:wordpress:*:*2.5.0Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.1:*:*:*:*:wordpress:*:*2.5.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.2:*:*:*:*:wordpress:*:*2.5.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.3:*:*:*:*:wordpress:*:*2.5.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.4:*:*:*:*:wordpress:*:*2.5.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.5:*:*:*:*:wordpress:*:*2.5.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.6:*:*:*:*:wordpress:*:*2.5.6Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.7:*:*:*:*:wordpress:*:*2.5.7Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.8:*:*:*:*:wordpress:*:*2.5.8Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.9:*:*:*:*:wordpress:*:*2.5.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.91:*:*:*:*:wordpress:*:*2.5.91Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.92:*:*:*:*:wordpress:*:*2.5.92Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.93:*:*:*:*:wordpress:*:*2.5.93Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.94:*:*:*:*:wordpress:*:*2.5.94Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.95:*:*:*:*:wordpress:*:*2.5.95Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.96:*:*:*:*:wordpress:*:*2.5.96Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.97:*:*:*:*:wordpress:*:*2.5.97Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.98:*:*:*:*:wordpress:*:*2.5.98Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.5.99:*:*:*:*:wordpress:*:*2.5.99Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.0:*:*:*:*:wordpress:*:*2.6.0Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.1:*:*:*:*:wordpress:*:*2.6.1Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.2:*:*:*:*:wordpress:*:*2.6.2Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.3:*:*:*:*:wordpress:*:*2.6.3Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.4:*:*:*:*:wordpress:*:*2.6.4Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.5:*:*:*:*:wordpress:*:*2.6.5Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.6:*:*:*:*:wordpress:*:*2.6.6Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.7:*:*:*:*:wordpress:*:*2.6.7Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.8:*:*:*:*:wordpress:*:*2.6.8Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.9:*:*:*:*:wordpress:*:*2.6.9Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.91:*:*:*:*:wordpress:*:*2.6.91Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.92:*:*:*:*:wordpress:*:*2.6.92Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.93:*:*:*:*:wordpress:*:*2.6.93Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.94:*:*:*:*:wordpress:*:*2.6.94Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.95:*:*:*:*:wordpress:*:*2.6.95Vulnerablecodename065
cpe:2.3:a:w3eden:download_manager:2.6.96:*:*:*:*:wordpress:*:*2.6.96Vulnerablecodename065
  • cpe:2.3:a:w3eden:download_manager:1.5.1:*:*:*:*:wordpress:*:* Versions 1.5.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.5.2:*:*:*:*:wordpress:*:* Versions 1.5.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.5.3:*:*:*:*:wordpress:*:* Versions 1.5.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.5.9:*:*:*:*:wordpress:*:* Versions 1.5.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.5.32:*:*:*:*:wordpress:*:* Versions 1.5.32 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:1.5.33:*:*:*:*:wordpress:*:* Versions 1.5.33 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.1:*:*:*:*:wordpress:*:* Versions 2.0.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.2:*:*:*:*:wordpress:*:* Versions 2.0.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.3:*:*:*:*:wordpress:*:* Versions 2.0.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.4:*:*:*:*:wordpress:*:* Versions 2.0.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.5:*:*:*:*:wordpress:*:* Versions 2.0.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.6:*:*:*:*:wordpress:*:* Versions 2.0.6 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.7:*:*:*:*:wordpress:*:* Versions 2.0.7 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.8:*:*:*:*:wordpress:*:* Versions 2.0.8 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.9:*:*:*:*:wordpress:*:* Versions 2.0.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.10:*:*:*:*:wordpress:*:* Versions 2.0.10 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.11:*:*:*:*:wordpress:*:* Versions 2.0.11 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.12:*:*:*:*:wordpress:*:* Versions 2.0.12 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.13:*:*:*:*:wordpress:*:* Versions 2.0.13 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.14:*:*:*:*:wordpress:*:* Versions 2.0.14 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.15:*:*:*:*:wordpress:*:* Versions 2.0.15 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.16:*:*:*:*:wordpress:*:* Versions 2.0.16 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.17:*:*:*:*:wordpress:*:* Versions 2.0.17 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.18:*:*:*:*:wordpress:*:* Versions 2.0.18 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.0.19:*:*:*:*:wordpress:*:* Versions 2.0.19 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.1.0:*:*:*:*:wordpress:*:* Versions 2.1.0 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.1.1:*:*:*:*:wordpress:*:* Versions 2.1.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.1.2:*:*:*:*:wordpress:*:* Versions 2.1.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.1.3:*:*:*:*:wordpress:*:* Versions 2.1.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.0:*:*:*:*:wordpress:*:* Versions 2.2.0 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.1:*:*:*:*:wordpress:*:* Versions 2.2.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.2:*:*:*:*:wordpress:*:* Versions 2.2.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.3:*:*:*:*:wordpress:*:* Versions 2.2.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.4:*:*:*:*:wordpress:*:* Versions 2.2.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.5:*:*:*:*:wordpress:*:* Versions 2.2.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.6:*:*:*:*:wordpress:*:* Versions 2.2.6 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.7:*:*:*:*:wordpress:*:* Versions 2.2.7 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.8:*:*:*:*:wordpress:*:* Versions 2.2.8 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.2.9:*:*:*:*:wordpress:*:* Versions 2.2.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.0:*:*:*:*:wordpress:*:* Versions 2.3.0 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.1:*:*:*:*:wordpress:*:* Versions 2.3.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.2:*:*:*:*:wordpress:*:* Versions 2.3.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.3:*:*:*:*:wordpress:*:* Versions 2.3.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.4:*:*:*:*:wordpress:*:* Versions 2.3.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.5:*:*:*:*:wordpress:*:* Versions 2.3.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.6:*:*:*:*:wordpress:*:* Versions 2.3.6 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.7:*:*:*:*:wordpress:*:* Versions 2.3.7 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.8:*:*:*:*:wordpress:*:* Versions 2.3.8 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.3.9:*:*:*:*:wordpress:*:* Versions 2.3.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.0:*:*:*:*:wordpress:*:* Versions 2.4.0 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.1:*:*:*:*:wordpress:*:* Versions 2.4.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.2:*:*:*:*:wordpress:*:* Versions 2.4.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.3:*:*:*:*:wordpress:*:* Versions 2.4.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.4:*:*:*:*:wordpress:*:* Versions 2.4.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.5:*:*:*:*:wordpress:*:* Versions 2.4.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.6:*:*:*:*:wordpress:*:* Versions 2.4.6 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.7:*:*:*:*:wordpress:*:* Versions 2.4.7 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.8:*:*:*:*:wordpress:*:* Versions 2.4.8 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.4.9:*:*:*:*:wordpress:*:* Versions 2.4.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.0:*:*:*:*:wordpress:*:* Versions 2.5.0 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.1:*:*:*:*:wordpress:*:* Versions 2.5.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.2:*:*:*:*:wordpress:*:* Versions 2.5.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.3:*:*:*:*:wordpress:*:* Versions 2.5.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.4:*:*:*:*:wordpress:*:* Versions 2.5.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.5:*:*:*:*:wordpress:*:* Versions 2.5.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.6:*:*:*:*:wordpress:*:* Versions 2.5.6 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.7:*:*:*:*:wordpress:*:* Versions 2.5.7 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.8:*:*:*:*:wordpress:*:* Versions 2.5.8 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.9:*:*:*:*:wordpress:*:* Versions 2.5.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.91:*:*:*:*:wordpress:*:* Versions 2.5.91 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.92:*:*:*:*:wordpress:*:* Versions 2.5.92 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.93:*:*:*:*:wordpress:*:* Versions 2.5.93 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.94:*:*:*:*:wordpress:*:* Versions 2.5.94 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.95:*:*:*:*:wordpress:*:* Versions 2.5.95 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.96:*:*:*:*:wordpress:*:* Versions 2.5.96 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.97:*:*:*:*:wordpress:*:* Versions 2.5.97 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.98:*:*:*:*:wordpress:*:* Versions 2.5.98 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.5.99:*:*:*:*:wordpress:*:* Versions 2.5.99 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.0:*:*:*:*:wordpress:*:* Versions 2.6.0 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.1:*:*:*:*:wordpress:*:* Versions 2.6.1 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.2:*:*:*:*:wordpress:*:* Versions 2.6.2 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.3:*:*:*:*:wordpress:*:* Versions 2.6.3 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.4:*:*:*:*:wordpress:*:* Versions 2.6.4 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.5:*:*:*:*:wordpress:*:* Versions 2.6.5 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.6:*:*:*:*:wordpress:*:* Versions 2.6.6 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.7:*:*:*:*:wordpress:*:* Versions 2.6.7 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.8:*:*:*:*:wordpress:*:* Versions 2.6.8 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.9:*:*:*:*:wordpress:*:* Versions 2.6.9 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.91:*:*:*:*:wordpress:*:* Versions 2.6.91 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.92:*:*:*:*:wordpress:*:* Versions 2.6.92 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.93:*:*:*:*:wordpress:*:* Versions 2.6.93 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.94:*:*:*:*:wordpress:*:* Versions 2.6.94 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.95:*:*:*:*:wordpress:*:* Versions 2.6.95 Vulnerable ·codename065
  • cpe:2.3:a:w3eden:download_manager:2.6.96:*:*:*:*:wordpress:*:* Versions 2.6.96 Vulnerable ·codename065

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-8585
  2. 2026-10-03 Alias added: GHSA-482j-63pf-fmxq

References

Exploit 1

  • TI-2023-05891 Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak CVSS 3.1HIGH 7.5
  • TI-2023-01700 Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure CVSS 3.1HIGH 7.5
  • TI-2023-01438 Download Manager < 3.2.71 - Broken Access Controls CVSS 3.1MEDIUM 6.5
  • TI-2024-07827 Download Manager < 3.3.00 - Contributor+ Stored XSS CVSS 3.1MEDIUM 5.4
  • TI-2022-04091 Download Manager < 3.2.62 - Contributor+ Stored XSS CVSS 3.1MEDIUM 5.4
  • TI-2024-09921 Download Manager < 3.3.03 - Admin+ Stored XSS CVSS 3.1MEDIUM 4.8
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences