2 matches found
CVE-2026-97338
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all versions up to, and including, 3.3.70 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
6.4CVSS0.00216EPSS
SaveExploits0References7
EUVD-2026-91257
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all versions up to, and including, 3.3.70 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
6.4CVSS6.1AI score0.00216EPSS
SaveExploits0References7
20