133 matches found
WordPress Download Manager plugin 4.0.0-7.5.8 - Privacy Settings Update vulnerability
Privacy Settings Update vulnerability discovered by Kartik Sharma in WordPress Plugin Download Manager versions 4.0.0-7.5.8...
WordPress Download Manager plugin < 3.3.71 - Privacy Settings Update vulnerability
Privacy Settings Update vulnerability discovered by Kartik Sharma in WordPress Plugin Download Manager versions 3.3.71...
WordPress Download Manager plugin <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability
Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability discovered by Yuvraj Tomar in WordPress Plugin Download Manager versions = 3.3.57...
WordPress Download Manager plugin <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Download Manager versions = 3.3.58...
WordPress Download Manager plugin <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Sawyer in WordPress Plugin Download Manager versions = 3.3.71...
WP Download Manager Shortcode RCE (CVE-2024-11740)
Exploits CVE-2024-11740 in WordPress Download Manager 3.3.04: unauthenticated arbitrary shortcode execution via wpdmxp query parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Download Manager shortcode execution CVE-2024-11740.""" from kittysploit import from...
WordPress Download Manager plugin <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Download Manager versions = 3.3.70...
WordPress Download Manager plugin <= 3.3.70 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Download Manager versions = 3.3.70...
WordPress Download Manager plugin < 3.3.71 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Mark Moore in WordPress Plugin Download Manager versions 3.3.71...
WordPress Download Manager plugin <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Download Manager versions = 3.3.66...
WordPress Download Manager <= 3.2.59 - Reflected XSS Detection
W3 Eden, Inc. Download Manager plugin = 3.2.59 contains a reflected cross-site scripting caused by insufficient input sanitization, letting attackers execute scripts in the context of the victim's browser, exploit requires attacker to craft a malicious link. !/usr/bin/env python3 -- coding: utf-8...
WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure Detection
The WordPress Download Manager plugin before version 3.3.07 does not prevent directory listing on web servers that don't use htaccess, allowing unauthorized access to files stored in the download-manager-files directory. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Download Manager...
WordPress Download Manager <2.9.94 - Cross-Site Scripting Detection
WordPress Download Manager plugin before 2.9.94 contains a cross-site scripting vulnerability via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Download Manager plugin before 2.""" from...
CVE-2026-61948
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-61943
Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...
EUVD-2026-48206
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
EUVD-2026-48202
Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...
PT-2026-63864
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
