CVE-2017-2216

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress Download Manager plugin <= 2.8.97 - Authenticated Arbitrary File Upload Vulnerability

Authenticated Arbitrary File Upload Vulnerability exsists in WordPress WordPress Download Manager plugin = 2.8.97 . It doesn't check what type of files you can upload so an attacker can upload .PHP files. Solution Update the plugin...

WordPress Download Manager plugin cross-site scripting vulnerability (CNVD-2017-14913)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Download Manager plugin. A remote attacker can...

WordPress Download Manager 2.9.46 / 2.9.51 Cross Site Scripting

Details ================ Software: WordPress Download Manager Version: 2.9.46,2.9.51 Homepage: https://wordpress.org/plugins/download-manager/ Advisory report: https://security.dxw.com/advisories/xss-download-manager/ CVE: Awaiting assignment CVSS: 5.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N Descripti...

WordPress Download Manager 2.9.46 / 2.9.51 Cross Site Scripting Vulnerability

WordPress Download Manager plugin versions 2.9.46 and 2.9.51 suffer from a cross site scripting vulnerability. Details ================ Software: WordPress Download Manager Version: 2.9.46,2.9.51 Homepage: https://wordpress.org/plugins/download-manager/ Advisory report:...

Download Manager <= 2.9.51 - Authenticated Reflected Cross-Site Scripting (XSS)

The WordPress Download Manager WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Download Manager plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Download Manager plugin. A remote attacker can...

WordPress Download Manager Plugin Redirection Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A redirection vulnerability exists in the WordPress Download Manager plugin. An attacker can exploit this...

Open redirect vulnerability in WordPress plugin "WordPress Download Manager"

Overview The WordPress plugin "WordPress Download Manager" provided by W3 Eden, Inc. contains an open redirect vulnerability CWE-601. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

Cross-site scripting vulnerability in WordPress plugin "WordPress Download Manager"

Overview The WordPress plugin "WordPress Download Manager" provided by W3 Eden, Inc. contains a cross-site scripting vulnerability CWE-79. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...

JVN#79738260: Multiple vulnerabilities in WordPress plugin "WordPress Download Manager"

The WordPress plugin "WordPress Download Manager" provided by W3 Eden, Inc. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-2216 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

PT-2017-17116 · Bittorrent +1 · Qbittorrent +1

Name of the Vulnerable Software and Affected Versions: qBittorrent versions prior to 3.3.11 qBittorrent versions prior to the version released in October 2024 Description: The issue concerns a lack of proper escaping of values in the WebUI, potentially leading to XSS attacks. Additionally, there...

WordPress Download Manager 2.8.99 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Request Forgery in WordPress Download Manager Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016...

WordPress Download Manager 2.8.99 Cross Site Request Forgery

------------------------------------------------------------------------ Cross-Site Request Forgery in WordPress Download Manager Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016...

Wordpress Download Manager plugin cross-site request forgery vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the Wordpress Download Manager plugin. An attacker can exploit the...

Download Manager <= 2.9.45 - Cross-Site Request Forgery (CSRF)

The WordPress Download Manager WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress WP-Filebase Download Manager 3.4.4 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in WP-Filebase Download Manager WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

Fast Download Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Download Manager published at the 'play' market has multiple vulnerabilities...

Turbo Download Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Turbo Download Manager published at the 'play' market has multiple vulnerabilities...

Download Manager - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager published at the 'play' market has multiple vulnerabilities...