Lucene search
Krzysztof ZającPATCHSTACK:8131E82962711259F86E23983D24D431HistoryJan 12, 2022 - 12:00 a.m.
WordPress Download Manager plugin <= 3.2.33 - Authenticated SQL injection (SQLi) vulnerability to Reflected XSS vulnerability
2022-01-1200:00:00
Krzysztof Zając
patchstack.com
10
wordpress
download manager
authenticated sql injection
reflected xss
krzysztof zając
EPSS
0.001
Percentile
36.7%
Authenticated SQL injection (SQLi) vulnerability to Reflected XSS vulnerability discovered by Krzysztof Zając in WordPress Download Manager plugin (versions <= 3.2.33).
Solution
Update the WordPress Download Manager plugin to the latest available version (at least 3.2.34).
Affected configurations
Node
-download_managerRange≤3.2.33
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | download_manager | * | cpe:2.3:a:-:download_manager:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
wpvulndb
wpvulndb
openvas
openvas
WordPress Download Manager Plugin < 3.2.34 SQLi Vulnerability
2022-03-01 00:00:00
cve
cve
CVE-2021-25069
2022-02-21 11:15:08
nvd
nvd
CVE-2021-25069
2022-02-21 11:15:08
prion
prion
Cross site scripting
2022-02-21 11:15:00
wpexploit
wpexploit
nessus
nessus
Download Manager Plugin for WordPress < 3.2.34 Multiple Vulnerabilities
2023-09-13 00:00:00