Codename065 vulnerabilities

Products

• Download Manager 65
• Premium Packages – Sell Digital Products Securely 11

Newest

• codename065 download manager Download Manager (Free & Pro) - Privacy Settings Update via CSRF CVE-2026-86611 4.3 MediumOctober 21, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes CVE-2026-110664 6.4 MediumOctober 16, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email' CVE-2026-18586 7.2 HighOctober 15, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter CVE-2026-103478 6.4 MediumOctober 10, 2026
• codename065 download manager Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter CVE-2026-12054 6.1 MediumOctober 10, 2026
• codename065 download manager Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode CVE-2026-9696 6.4 MediumOctober 10, 2026
• codename065 download manager Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email CVE-2026-103964 4.3 MediumOctober 10, 2026
• codename065 download manager Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute CVE-2026-102401 6.4 MediumOctober 10, 2026
• codename065 download manager WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability CVE-2026-94405 5.3 MediumOctober 2, 2026
• codename065 download manager Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name CVE-2026-97338 6.4 MediumOctober 2, 2026
• codename065 download manager Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon CVE-2026-86610 6.4 MediumOctober 1, 2026
• codename065 download manager Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription CVE-2026-86609 8.8 HighSeptember 27, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter CVE-2026-93654 7.2 HighSeptember 25, 2026
• codename065 download manager Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter CVE-2026-92714 6.5 MediumSeptember 18, 2026
• codename065 download manager Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attribute CVE-2026-16685 6.4 MediumAugust 1, 2026
• codename065 download manager WordPress Download Manager < 3.3.66 - Author+ Stored XSS via Package Title CVE-2026-14292 5.4 MediumAugust 1, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 6.2.0 - Unauthenticated SQL Injection CVE-2026-12800 7.5 HighJuly 28, 2026
• codename065 download manager WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key CVE-2026-14235 7.5 HighJuly 27, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter CVE-2026-15348 6.3 MediumJuly 23, 2026
• codename065 premium packages – sell digital products securely Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter CVE-2026-15906 6.5 MediumJuly 23, 2026
• codename065 download manager Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes CVE-2026-14343 6.4 MediumJuly 9, 2026
• codename065 download manager Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute CVE-2026-13733 6.4 MediumJuly 1, 2026
• codename065 download manager Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal CVE-2026-4057 4.3 MediumApril 10, 2026
• codename065 download manager Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-5357 6.4 MediumApril 9, 2026
• codename065 download manager WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability CVE-2026-39676 Public exploit 5.3 MediumApril 8, 2026
• codename065 download manager WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability CVE-2026-39615 5.9 MediumApril 8, 2026
• codename065 download manager Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter CVE-2026-2571 4.3 MediumMarch 19, 2026
• codename065 download manager Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parameter CVE-2026-1666 6.1 MediumFebruary 18, 2026
• codename065 download manager Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword CVE-2025-15364 7.3 HighJanuary 6, 2026
• codename065 download manager Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosure CVE-2025-13498 4.3 MediumDecember 18, 2025
• codename065 download manager WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability CVE-2025-63070 4.3 MediumDecember 9, 2025
• codename065 download manager Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key CVE-2025-12177 5.3 MediumNovember 8, 2025
• codename065 download manager WordPress Download Manager Plugin <= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-60093 4.3 MediumSeptember 26, 2025
• codename065 download manager WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability CVE-2025-60092 5.3 MediumSeptember 26, 2025
• codename065 download manager Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter CVE-2025-10146 6.1 MediumSeptember 19, 2025
• codename065 download manager Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode CVE-2025-4367 6.4 MediumJune 19, 2025
• codename065 download manager Download Manager <= 3.2.98 - Admin+ Stored XSS CVE-2024-8284 4.8 MediumMay 15, 2025
• codename065 download manager Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion CVE-2025-3404 8.8 HighApril 19, 2025
• codename065 download manager Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2025-3056 5.4 MediumApril 18, 2025
• codename065 download manager Download Manager < 3.3.07 - Unauthenticated Data Exposure CVE-2024-13126 4.6 MediumMarch 16, 2025
• codename065 download manager Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite CVE-2025-1785 5.4 MediumMarch 13, 2025
• codename065 download manager WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability CVE-2024-56217 4.3 MediumDecember 31, 2024
• codename065 download manager Download Manager < 3.3.03 - Admin+ Stored XSS CVE-2024-10706 4.8 MediumDecember 20, 2024
• codename065 download manager Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files CVE-2024-11768 5.3 MediumDecember 19, 2024
• codename065 download manager Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-11740 7.3 HighDecember 19, 2024
• codename065 premium packages – sell digital products securely Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg CVE-2024-11225 6.1 MediumNovember 22, 2024
• codename065 premium packages – sell digital products securely Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode CVE-2024-10164 6.4 MediumNovember 21, 2024
• codename065 download manager Download Manager < 3.3.00 - Contributor+ Stored XSS CVE-2024-8444 5.4 MediumOctober 30, 2024
• codename065 premium packages – sell digital products securely, wpdownloadmanager premium packages - sell digital products securely +1 more Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery CVE-2024-7386 4.3 MediumSeptember 25, 2024
• buywptemplates multipurpose MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection CVE-2024-7486 8.8 HighAugust 8, 2024
• Show olderLoading…