CVE-2025-3056

creationtimestamp| type| source ---|---|--- 2025-04-18 08:59:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12409 2025-04-18 16:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fpkqnk2u...

CVE-2025-3056

The CVE-2025-3056 entry pertains to the WordPress Download Manager plugin and is an authenticated Stored Cross-Site Scripting vulnerability via SVG file uploads. It affects all versions up to 3.3.12 due to insufficient input sanitization and output escaping, allowing an Author+ or higher to injec...