169 matches found
WordPress Download Monitor plugin < 5.3.4 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Download Monitor versions 5.3.4...
WordPress Download Monitor plugin < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization vulnerability
Multisite Subsite Admin+ Incorrect Authorization vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Download Monitor versions 5.3.5...
WordPress Download Manager plugin 4.0.0-7.5.8 - Privacy Settings Update vulnerability
Privacy Settings Update vulnerability discovered by Kartik Sharma in WordPress Plugin Download Manager versions 4.0.0-7.5.8...
WordPress Download Manager plugin < 3.3.71 - Privacy Settings Update vulnerability
Privacy Settings Update vulnerability discovered by Kartik Sharma in WordPress Plugin Download Manager versions 3.3.71...
WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin Download Monitor versions = 5.3.3...
WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mash in WordPress Plugin Download Monitor integration for WooCommerce versions = 1.0.3...
WordPress Download Manager plugin <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability
Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability discovered by Yuvraj Tomar in WordPress Plugin Download Manager versions = 3.3.57...
WordPress Download Manager plugin <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Download Manager versions = 3.3.58...
WordPress Download Manager plugin <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Sawyer in WordPress Plugin Download Manager versions = 3.3.71...
WP Download Manager Shortcode RCE (CVE-2024-11740)
Exploits CVE-2024-11740 in WordPress Download Manager 3.3.04: unauthenticated arbitrary shortcode execution via wpdmxp query parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Download Manager shortcode execution CVE-2024-11740.""" from kittysploit import from...
WordPress Download Manager plugin <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Download Manager versions = 3.3.70...
WordPress Download Manager plugin <= 3.3.70 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Download Manager versions = 3.3.70...
WordPress Download Manager plugin < 3.3.71 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Mark Moore in WordPress Plugin Download Manager versions 3.3.71...
WordPress Download Monitor has an authorization vulnerability
WordPress Download Monitor is a powerful free plugin designed specifically for WordPress, used to manage, track, and analyze website file downloads. It supports version control, permission restrictions, and detailed logging. WordPress Download Monitor has an authorization vulnerability that arise...
WordPress Download Manager plugin <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Download Manager versions = 3.3.66...
WordPress Download Shortcode 0.2.3 - Local File Inclusion Detection
WordPress Download Shortcode 0.2.3 is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Prior versions may also be affected...
WordPress Download Manager <2.9.94 - Cross-Site Scripting Detection
WordPress Download Manager plugin before 2.9.94 contains a cross-site scripting vulnerability via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Download Manager plugin before 2.""" from...
WordPress Download Manager <= 3.2.59 - Reflected XSS Detection
W3 Eden, Inc. Download Manager plugin = 3.2.59 contains a reflected cross-site scripting caused by insufficient input sanitization, letting attackers execute scripts in the context of the victim's browser, exploit requires attacker to craft a malicious link. !/usr/bin/env python3 -- coding: utf-8...
WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure Detection
The WordPress Download Manager plugin before version 3.3.07 does not prevent directory listing on web servers that don't use htaccess, allowing unauthorized access to files stored in the download-manager-files directory. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Download Manager...
