CVE-2023-22713

The CVE-2023-22713 issue affects WordPress Download Manager Gutenberg Blocks plugin (

CVE-2023-22713 WordPress Gutenberg Blocks by WordPress Download Manager Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in WordPress Download Manager Gutenberg Blocks by WordPress Download Manager plugin = 2.1.8 versions...

PT-2023-18656 · WordPress · Wordpress Download Manager Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: WordPress Download Manager Gutenberg Blocks by WordPress Download Manager plugin versions = 2.1.8 Description: The issue is related to an Authenticated Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or...

WordPress plugin Gutenberg Blocks by WordPress Download Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-1809

The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files...

Design/Logic Flaw

The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files...

CVE-2023-1809 Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files...

CVE-2023-1809

This CVE pertains to the WordPress plugin Download Manager Pro (and its Download Manager) prior to version 6.3.0, where master key information is leaked without authentication, enabling an attacker to download arbitrary password‑protected files. Root cause is unauthenticated exposure of sensitive...

CVE-2023-1809 Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files...

WordPress plugin Download Manager 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

CVE-2022-45836

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

CVE-2022-45836

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

CVE-2022-45836 WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in W3 Eden, Inc. Download Manager plugin = 3.2.59 versions...

CVE-2022-45836

CVE-2022-45836 affects W3 Eden, Inc. Download Manager plugin for WordPress, version 3.2.59 and earlier. The connected PT-Security entry specifies an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in this plugin, exploitable without authentication. The issue is mitigated by upg...

PT-2023-14776

Name of the Vulnerable Software and Affected Versions W3 Eden, Inc. Download Manager plugin versions 3.2.59 and earlier Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for reflect...

WordPress plugin Download Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Download Manager Plugin 5.0.0-6.2.9 is vulnerable to Sensitive Data Exposure

Software Download Manager Type Plugin Vulnerable versions 5.0.0-6.2.9 Fixed in 6.3.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-1809 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 59ef71547191 Credits Johan Kragt Required...

Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure

The plugin leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files. PoC - Create a password protected package containing one or more files. - Navigate to the download page of the package e.g. /download/package1 -...

Internet Download Manager v6.41 Build 3 - Remote Code Execution Vulnerability

Exploit Title: Internet Download Manager v6.41 Build 3 - Remote Code Execution RCE Exploit Author: M. Akil Gündoğan Contact: https://twitter.com/akilgundogan Vendor Homepage: https://www.internetdownloadmanager.com/ Software Link:...