| CVE-2026-12054 |
The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'REFERRER' parameter in…
|
6.1
Medium
|
Oct 10, 2026 |
| CVE-2026-9696 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter…
|
6.4
Medium
|
Oct 10, 2026 |
| CVE-2026-103964 |
The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
|
4.3
Medium
|
Oct 10, 2026 |
| CVE-2026-102401 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all…
|
6.4
Medium
|
Oct 10, 2026 |
| CVE-2026-97338 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all…
|
6.4
Medium
|
Oct 2, 2026 |
| CVE-2026-92714 |
The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and…
|
6.5
Medium
|
Sep 18, 2026 |
| CVE-2026-16685 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in…
|
6.4
Medium
|
Aug 1, 2026 |
| CVE-2026-14343 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and…
|
6.4
Medium
|
Jul 9, 2026 |
| CVE-2026-13733 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'no_data_msg' Shortcode…
|
6.4
Medium
|
Jul 1, 2026 |
| CVE-2026-4057 |
The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…
|
4.3
Medium
|
Apr 10, 2026 |
| CVE-2026-5357 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the…
|
6.4
Medium
|
Apr 9, 2026 |
| CVE-2026-2571 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check…
|
4.3
Medium
|
Mar 19, 2026 |
| CVE-2026-1666 |
The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'redirect_to'…
|
6.1
Medium
|
Feb 18, 2026 |
| CVE-2025-15364 |
The Download Manager plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions…
|
7.3
High
|
Jan 6, 2026 |
| CVE-2025-13498 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access of sensitive information in all…
|
4.3
Medium
|
Dec 18, 2025 |
| CVE-2025-12177 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the…
|
5.3
Medium
|
Nov 8, 2025 |
| CVE-2025-10146 |
The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_ids’ parameter…
|
6.1
Medium
|
Sep 19, 2025 |
| CVE-2025-4367 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Jun 19, 2025 |
| CVE-2025-3404 |
The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
|
8.8
High
|
Apr 19, 2025 |
| CVE-2025-3056 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all…
|
5.4
Medium
|
Apr 18, 2025 |
| CVE-2025-1785 |
The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,…
|
5.4
Medium
|
Mar 13, 2025 |
| CVE-2024-11768 |
The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to…
|
5.3
Medium
|
Dec 19, 2024 |
| CVE-2024-11740 |
The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to,…
|
7.3
High
|
Dec 19, 2024 |
| CVE-2024-6208 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Jul 31, 2024 |
| CVE-2024-2098 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper…
|
7.5
High
|
Jun 13, 2024 |