Skip to contentCodename065 Download Manager vulnerabilities
- codename065 download managerDownload Manager <= 3.2.84 - Missing AuthorizationCVE-2023-67855.3 Medium
- codename065 download managerDownload Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-69546.4 Medium
- codename065 download managerDownload Manager < 3.2.83 - Unauthenticated Protected File Download Password LeakCVE-2023-6421Public exploit7.5 High
- codename065 download managerDownload Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-23056.4 Medium
- codename065 download managerDownload Manager < 3.2.71 - Broken Access ControlsCVE-2023-15246.5 Medium
- codename065 download managerDownload Manager Pro < 6.3.0 - Unauthenticated Sensitive Information DisclosureCVE-2023-18097.5 High
- codename065 download managerWordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)CVE-2022-458367.1 High
- codename065 download managerDownload Manager < 3.2.62 - Contributor+ Stored XSSCVE-2022-44765.4 Medium
- adobe download managerDownload Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path TraversalCVE-2022-29264.9 Medium
- codename065 download managerDownload Manager <= 3.2.49 - Authenticated (Contributor+) PHAR DeserializationCVE-2022-24368.8 High
- codename065 download managerDownload Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File DeletionCVE-2022-24318.1 High
- codename065 download managerDownload Manager < 3.2.50 - Bypass IP Address Blocking RestrictionCVE-2022-23627.5 High
- codename065 download managerDownload Manager <= 3.2.46 - Contributor+ Cross-Site ScriptingCVE-2022-21016.4 Medium
- codename065 download managerDownload Manager < 3.2.44 - Reflected Cross-Site ScriptingCVE-2022-21686.1 Medium
- codename065 download managerDownload Manager <= 3.2.42 - Reflected Cross-Site ScriptingCVE-2022-19856.1 Medium
- codename065 download managerDownload Manager < 3.2.39 - Unauthenticated brute force of files master keyCVE-2022-08287.5 High
- codename065 download managerWordpress Download Manager < 3.2.25 - Sensitive Information DisclosureCVE-2021-250877.5 High
- codename065 download managerWordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSSCVE-2021-250698.8 High