PT-2023-14776

Name of the Vulnerable Software and Affected Versions W3 Eden, Inc. Download Manager plugin versions 3.2.59 and earlier Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for reflect...

w3-directory.com Cross Site Scripting vulnerability OBB-3128505

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-36288

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-36288

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-34658

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-34658

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Cross site scripting

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-36288 WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-36288

CVE-2022-36288 concerns the WordPress Download Manager plugin (versions up to and including 3.2.48). Multiple CSRF vulnerabilities exist in this plugin, allowing arbitrary actions to be performed by an attacker with a logged-in admin user when a user is enticed to visit a crafted page or perform ...

CVE-2022-34658

CVE-2022-34658 concerns the WordPress Download Manager plugin (versions ≤ 3.2.48). The vulnerability is a Stored Cross-Site Scripting (XSS) issue that can be triggered by users with at least a Contributor role (i.e., authenticated users). The root cause is inadequate sanitization/escaping of inpu...

CVE-2022-34347

Cross-Site Request Forgery CSRF vulnerability in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-34347 WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

CVE-2022-34347

CVE-2022-34347 affects the WordPress Download Manager plugin (W3 Eden) up to version 3.2.48. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the plugin, where certain admin actions (e.g., clearing cache/stats, updating template status) could be triggered by an attacker when a lo...

CVE-2022-34347 WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

WordPress Download Manager 3.2.50 Arbitrary File Deletion

Description: Authenticated Contributor+ Arbitrary File Deletion Affected Plugin: Download Manager Plugin Slug: download-manager Plugin Developer: W3 Eden, Inc. Affected Versions: = 3.2.50 CVE ID: CVE-2022-2431 CVSS Score: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...

High Severity Vulnerability Patched in Download Manager Plugin

On July 8, 2022 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability we discovered in “Download Manager,” a WordPress plugin that is installed on over 100,000 sites. This flaw makes it possible for an authenticated attacker to delete arbitrary...

WordPress W3 Total Cache Plugin < 2.1.5 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:boldgrid:w3totalcache"; if description...

WordPress W3 Total Cache Plugin < 2.1.3 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:boldgrid:w3totalcache"; if description...