| CVE-2026-86611 |
The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF…
|
4.3
Moyenne
|
21 oct. 2026 |
| CVE-2026-86610 |
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before…
|
6.4
Moyenne
|
1 oct. 2026 |
| CVE-2026-86609 |
The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its…
|
8.8
Élevée
|
27 sept. 2026 |
| CVE-2026-14292 |
The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in…
|
5.4
Moyenne
|
1 août 2026 |
| CVE-2026-14235 |
The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session…
|
7.5
Élevée
|
27 juil. 2026 |
| CVE-2024-8284 |
The Download Manager WordPress plugin before 3.2.99 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
15 mai 2025 |
| CVE-2024-13126 |
The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use…
|
4.6
Moyenne
|
16 mars 2025 |
| CVE-2024-10706 |
The Download Manager WordPress plugin before 3.3.03 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
20 déc. 2024 |
| CVE-2024-8444 |
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross…
|
5.4
Moyenne
|
30 oct. 2024 |
| CVE-2023-6421 |
The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon…
|
7.5
Élevée
|
1 janv. 2024 |
| CVE-2023-1524 |
The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files
|
6.5
Moyenne
|
30 mai 2023 |
| CVE-2023-1809 |
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password,…
|
7.5
Élevée
|
2 mai 2023 |
| CVE-2022-4476 |
The Download Manager WordPress plugin before 3.2.62 does not validate and escapes some of its shortcode attributes…
|
5.4
Moyenne
|
16 janv. 2023 |
| CVE-2022-2926 |
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high…
|
4.9
Moyenne
|
26 sept. 2022 |
| CVE-2022-2362 |
The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over…
|
Non notée
|
22 août 2022 |
| CVE-2022-2168 |
The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an…
|
Non notée
|
17 juil. 2022 |
| CVE-2022-0828 |
The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a…
|
Non notée
|
11 avr. 2022 |
| CVE-2021-25087 |
The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API…
|
Non notée
|
7 mars 2022 |
| CVE-2021-25069 |
The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before…
|
Non notée
|
21 févr. 2022 |