| CVE-2026-86611 |
The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF…
|
4.3
Medium
|
Oct 21, 2026 |
| CVE-2026-86610 |
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before…
|
6.4
Medium
|
Oct 1, 2026 |
| CVE-2026-86609 |
The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its…
|
8.8
High
|
Sep 27, 2026 |
| CVE-2026-14292 |
The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in…
|
5.4
Medium
|
Aug 1, 2026 |
| CVE-2026-14235 |
The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session…
|
7.5
High
|
Jul 27, 2026 |
| CVE-2024-8284 |
The Download Manager WordPress plugin before 3.2.99 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
May 15, 2025 |
| CVE-2024-13126 |
The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use…
|
4.6
Medium
|
Mar 16, 2025 |
| CVE-2024-10706 |
The Download Manager WordPress plugin before 3.3.03 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
Dec 20, 2024 |
| CVE-2024-8444 |
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross…
|
5.4
Medium
|
Oct 30, 2024 |
| CVE-2023-6421 |
The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon…
|
7.5
High
|
Jan 1, 2024 |
| CVE-2023-1524 |
The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files
|
6.5
Medium
|
May 30, 2023 |
| CVE-2023-1809 |
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password,…
|
7.5
High
|
May 2, 2023 |
| CVE-2022-4476 |
The Download Manager WordPress plugin before 3.2.62 does not validate and escapes some of its shortcode attributes…
|
5.4
Medium
|
Jan 16, 2023 |
| CVE-2022-2926 |
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high…
|
4.9
Medium
|
Sep 26, 2022 |
| CVE-2022-2362 |
The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over…
|
Not rated
|
Aug 22, 2022 |
| CVE-2022-2168 |
The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an…
|
Not rated
|
Jul 17, 2022 |
| CVE-2022-0828 |
The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a…
|
Not rated
|
Apr 11, 2022 |
| CVE-2021-25087 |
The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API…
|
Not rated
|
Mar 7, 2022 |
| CVE-2021-25069 |
The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before…
|
Not rated
|
Feb 21, 2022 |