Skip to content

Known vulnerabilities in codename065 Download Manager

Is your version affected?

CVE Summary Score Published
CVE-2024-1766 The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's Display Name in… 4.4 Medium Jun 12, 2024
CVE-2024-5266 The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpdm_user_dashboard,… 6.4 Medium Jun 12, 2024
CVE-2024-4001 The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Jun 5, 2024
CVE-2024-4160 The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium May 31, 2024
CVE-2023-6785 The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in… 5.3 Medium Mar 13, 2024
CVE-2023-6954 The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)… 6.4 Medium Mar 13, 2024
CVE-2023-2305 The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_members',… 6.4 Medium Jun 9, 2023
CVE-2022-2436 The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the… 8.8 High Sep 6, 2022
CVE-2022-2101 The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter… 6.4 Medium Jul 18, 2022
CVE-2022-1985 The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and… 6.1 Medium Jun 13, 2022

Other codename065 products