CVE-2014-9260

The basicsettings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option...

CVE-2014-9260

The CVE-2014-9260 entry concerns the WordPress Download Manager plugin. The vulnerability is in the basic_settings function of the plugin before version 2.7.3, which allows remote authenticated users to update every WordPress option. This privilege escalation enables an attacker with existing WP ...

WordPress Download Manager Plugin < 2.9.50 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106959";...

WordPress Download Manager Plugin < 2.9.50 Open Redirect Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106958";...

Download Manager <= 2.9.49 - Cross-Site Scripting (XSS)

The WordPress Download Manager WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Download Manager <= 2.9.50 - Open Redirect

The WordPress Download Manager WordPress plugin was affected by an Open Redirect security vulnerability...

CVE-2017-2216

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2217

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Open redirect

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2216

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2217

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2217

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2217

CVE-2017-2217 is an Open Redirect vulnerability in the WordPress Download Manager plugin for WordPress, present in versions prior to 2.9.51. An attacker can craft a URL that redirects the user to an arbitrary site, enabling phishing or credential-phishing scenarios. Affected product: WordPress Do...

CVE-2017-2216

The CVE-2017-2216 entry concerns the WordPress Download Manager plugin prior to version 2.9.50, which is affected by a Cross-site Scripting (XSS) vulnerability. The exact vectors are not specified in the description, but the vulnerability allows remote attackers to inject arbitrary web script or ...

CVE-2017-2216

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress Download Manager plugin <= 2.8.97 - Authenticated Arbitrary File Upload Vulnerability

Authenticated Arbitrary File Upload Vulnerability exsists in WordPress WordPress Download Manager plugin = 2.8.97 . It doesn't check what type of files you can upload so an attacker can upload .PHP files. Solution Update the plugin...

WordPress Download Manager plugin cross-site scripting vulnerability (CNVD-2017-14913)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Download Manager plugin. A remote attacker can...

WordPress Download Manager 2.9.46 / 2.9.51 Cross Site Scripting Vulnerability

WordPress Download Manager plugin versions 2.9.46 and 2.9.51 suffer from a cross site scripting vulnerability. Details ================ Software: WordPress Download Manager Version: 2.9.46,2.9.51 Homepage: https://wordpress.org/plugins/download-manager/ Advisory report:...

WordPress Download Manager 2.9.46 / 2.9.51 Cross Site Scripting

Details ================ Software: WordPress Download Manager Version: 2.9.46,2.9.51 Homepage: https://wordpress.org/plugins/download-manager/ Advisory report: https://security.dxw.com/advisories/xss-download-manager/ CVE: Awaiting assignment CVSS: 5.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N Descripti...