Cm Download Manager Security Vulnerabilities and Issues — Cm Download Manager CVE List

Lucene search

CmindsCm Download Manager

3 matches found

CVE•added 2024/03/25 5:15 a.m.•81 views

CVE-2024-1962

The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack

8.8CVSS8.5AI score0.00627EPSS

CVE•added 2024/03/25 5:15 a.m.•72 views

CVE-2024-1231

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack

6.8CVSS9.1AI score0.00063EPSS

CVE•added 2024/03/25 5:15 a.m.•70 views

CVE-2024-1232

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete downloads via a CSRF attack

4.8CVSS5.2AI score0.00134EPSS