Lucene search
Krzysztof ZającPATCHSTACK:8131E82962711259F86E23983D24D431HistoryJan 12, 2022 - 12:00 a.m.
WordPress Download Manager plugin <= 3.2.33 - Authenticated SQL injection (SQLi) vulnerability to Reflected XSS vulnerability
2022-01-1200:00:00
Krzysztof Zając
patchstack.com
8
0.001 Low
EPSS
Percentile
36.9%
Authenticated SQL injection (SQLi) vulnerability to Reflected XSS vulnerability discovered by Krzysztof Zając in WordPress Download Manager plugin (versions <= 3.2.33).
Solution
Update the WordPress Download Manager plugin to the latest available version (at least 3.2.34).
| CPE | Name | Operator | Version |
|---|---|---|---|
| download manager | le | 3.2.33 |
Related
cvelist
cvelist
wpexploit
wpexploit
prion
prion
Cross site scripting
2022-02-21 11:15:00
cve
cve
CVE-2021-25069
2022-02-21 11:15:08
nvd
nvd
CVE-2021-25069
2022-02-21 11:15:08
wpvulndb
wpvulndb
openvas
openvas
WordPress Download Manager Plugin < 3.2.34 SQLi Vulnerability
2022-03-01 00:00:00
nessus
nessus
Download Manager Plugin for WordPress < 3.2.34 Multiple Vulnerabilities
2023-09-13 00:00:00