| CVE-2026-12054 |
The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'REFERRER' parameter in…
|
6.1
Moyenne
|
10 oct. 2026 |
| CVE-2026-9696 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter…
|
6.4
Moyenne
|
10 oct. 2026 |
| CVE-2026-103964 |
The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
|
4.3
Moyenne
|
10 oct. 2026 |
| CVE-2026-102401 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all…
|
6.4
Moyenne
|
10 oct. 2026 |
| CVE-2026-97338 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all…
|
6.4
Moyenne
|
2 oct. 2026 |
| CVE-2026-92714 |
The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and…
|
6.5
Moyenne
|
18 sept. 2026 |
| CVE-2026-16685 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in…
|
6.4
Moyenne
|
1 août 2026 |
| CVE-2026-14343 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and…
|
6.4
Moyenne
|
9 juil. 2026 |
| CVE-2026-13733 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'no_data_msg' Shortcode…
|
6.4
Moyenne
|
1 juil. 2026 |
| CVE-2026-4057 |
The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…
|
4.3
Moyenne
|
10 avr. 2026 |
| CVE-2026-5357 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the…
|
6.4
Moyenne
|
9 avr. 2026 |
| CVE-2026-2571 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check…
|
4.3
Moyenne
|
19 mars 2026 |
| CVE-2026-1666 |
The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'redirect_to'…
|
6.1
Moyenne
|
18 févr. 2026 |
| CVE-2025-15364 |
The Download Manager plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions…
|
7.3
Élevée
|
6 janv. 2026 |
| CVE-2025-13498 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access of sensitive information in all…
|
4.3
Moyenne
|
18 déc. 2025 |
| CVE-2025-12177 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the…
|
5.3
Moyenne
|
8 nov. 2025 |
| CVE-2025-10146 |
The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_ids’ parameter…
|
6.1
Moyenne
|
19 sept. 2025 |
| CVE-2025-4367 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Moyenne
|
19 juin 2025 |
| CVE-2025-3404 |
The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
|
8.8
Élevée
|
19 avr. 2025 |
| CVE-2025-3056 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all…
|
5.4
Moyenne
|
18 avr. 2025 |
| CVE-2025-1785 |
The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,…
|
5.4
Moyenne
|
13 mars 2025 |
| CVE-2024-11768 |
The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to…
|
5.3
Moyenne
|
19 déc. 2024 |
| CVE-2024-11740 |
The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to,…
|
7.3
Élevée
|
19 déc. 2024 |
| CVE-2024-6208 |
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Moyenne
|
31 juil. 2024 |
| CVE-2024-2098 |
The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper…
|
7.5
Élevée
|
13 juin 2024 |