root-my-webos-tv

Root my webOS TV A simple python script that starts a telnet server on vulnerable webOS devices as root. Verified TVs webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS 7.3.1-43 mullet-mebin -...

CVE-2026-120658

The Download Manager plugin for WordPress (versions 6.0.0-7.6.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the file[additional_previews][] parameter. The root cause is insufficient input sanitization and output escaping within the wpdm_sanitize_array() function. While the function u...

EUVD-2026-124985

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fileadditionalpreviews' parameter in all versions up to, and including, 7.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint. id: CVE-2023-6421 info: name: WordPress Download Manager - File Password Exposure...

WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure

The WordPress Download Manager plugin before version 3.3.07 does not prevent directory listing on web servers that don't use htaccess, allowing unauthorized access to files stored in the download-manager-files directory. id: CVE-2024-13126 info: name: WordPress Download Manager 3.3.07 -...

WordPress Download Manager <2.9.94 - Cross-Site Scripting

WordPress Download Manager plugin before 2.9.94 contains a cross-site scripting vulnerability via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter. id: CVE-2019-15889 info: name: WordPress Download Manager 2.9.94 - Cross-Site Scripting author: daffainf...

Download Manager < 3.3.04 - Unauthenticated Arbitrary Shortcode Execution

The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting

The WordPress Download Manager plugin before version 3.2.44 does not properly sanitize and escape the userids parameter in the stats history dashboard. This allows authenticated attackers to perform Cross-Site Scripting attacks by injecting malicious JavaScript code. id: CVE-2022-2168 info: name:...

WordPress Download Manager plugin 6.0.0-7.6.3 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Download Manager versions 6.0.0-7.6.3...

Cve-2026-39676

Cve-2026-39676 Wordpress Version: Download Manager 3.3.5.2 Title: Missing Authorization - Unauthenticated IDOR Exploit...

CVE-2023-6421

CVE-2023-6421 Download Manager 3.2.83 - Unauthenticated Protected File Download Password Leak Description The plugin does not protect file download's passwords, leaking it upon receiving an invalid one POC python3 CVE-2023-6421.py https://kubernetes.docker.internal No link generated for ID 1. No...

WordPress Download Manager plugin < 3.3.73 - Unauthenticated Protected File Download vulnerability

Unauthenticated Protected File Download vulnerability discovered by Humberto SPatz in WordPress Plugin Download Manager versions 3.3.73...

WordPress Download Manager plugin 4.0.0-7.6.1 - Unauthenticated Protected File Download vulnerability

Unauthenticated Protected File Download vulnerability discovered by Humberto SPatz in WordPress Plugin Download Manager versions 4.0.0-7.6.1...

CVE-2026-110949

The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify a package's configured role restriction when validating a package password, allowing an unauthenticated user who knows the password of a role-restricted package to obtain a download...

CVE-2026-110948

The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify that a visitor is allowed to access a package before its media-preview renderers issue a download key for it, allowing unauthenticated visitors to download password-locked and...

CVE-2026-110949

The Download Manager WordPress plugin (Free & Pro) is vulnerable to an unauthenticated missing authorization flaw. Specifically, versions before 3.3.73 and before 7.6.2 (including versions 4.0.0-7.6.1) fail to verify a package's configured role restriction during package password validation. This...

WordPress Download Manager plugin < 3.3.73 - Unauthenticated Missing Authorization vulnerability

Unauthenticated Missing Authorization vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Download Manager versions 3.3.73...

WordPress Download Manager plugin 4.0.0-7.6.1 - Unauthenticated Missing Authorization vulnerability

Unauthenticated Missing Authorization vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Download Manager versions 4.0.0-7.6.1...

CVE-2026-110948 Download Manager (Free & Pro) - Unauthenticated Protected File Download via Media Preview Download Key

The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify that a visitor is allowed to access a package before its media-preview renderers issue a download key for it, allowing unauthenticated visitors to download password-locked and...

EUVD-2026-123161

The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not verify that a visitor is allowed to access a package before its media-preview renderers issue a download key for it, allowing unauthenticated visitors to download password-locked and...