CVE-2022-25606

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl, &downloadcategories...

PT-2022-17400

Name of the Vulnerable Software and Affected Versions WP-DownloadManager WordPress plugin versions = 1.68.6 Description Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered in the WP-DownloadManager WordPress plugin. The vulnerable parameters are download path,...

CVE-2022-25605

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vvulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl...

PT-2022-17399

Name of the Vulnerable Software and Affected Versions WP-DownloadManager WordPress plugin versions = 1.68.6 Description Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered. The vulnerable parameters are download path, download path url, and download page url...

PT-2021-12679

Name of the Vulnerable Software and Affected Versions: AquaNPlayer version 2.0.0.92 Description: The issue is related to a directory traversing vulnerability in the download page URL. An attacker can use "dot dot" sequences ../../ to traverse directories and potentially view host files on the...