Unknown Download Manager vulnerabilities

• codename065 download manager Download Manager (Free & Pro) - Privacy Settings Update via CSRF CVE-2026-86611 4.3 MediumOctober 21, 2026
• codename065 download manager Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon CVE-2026-86610 6.4 MediumOctober 1, 2026
• codename065 download manager Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription CVE-2026-86609 8.8 HighSeptember 27, 2026
• codename065 download manager WordPress Download Manager < 3.3.66 - Author+ Stored XSS via Package Title CVE-2026-14292 5.4 MediumAugust 1, 2026
• codename065 download manager WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key CVE-2026-14235 7.5 HighJuly 27, 2026
• codename065 download manager Download Manager <= 3.2.98 - Admin+ Stored XSS CVE-2024-8284 4.8 MediumMay 15, 2025
• codename065 download manager Download Manager < 3.3.07 - Unauthenticated Data Exposure CVE-2024-13126 4.6 MediumMarch 16, 2025
• codename065 download manager Download Manager < 3.3.03 - Admin+ Stored XSS CVE-2024-10706 4.8 MediumDecember 20, 2024
• codename065 download manager Download Manager < 3.3.00 - Contributor+ Stored XSS CVE-2024-8444 5.4 MediumOctober 30, 2024
• cminds cm download manager CM Download and File Manager < 2.9.1 - Download Edit via CSRF CVE-2024-1962 8.8 HighMarch 25, 2024
• cminds cm download manager CM Download Manager < 2.9.0 - Download Deletion via CSRF CVE-2024-1232 4.8 MediumMarch 25, 2024
• cminds cm download manager CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF CVE-2024-1231 6.8 MediumMarch 25, 2024
• codename065 download manager Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak CVE-2023-6421 Public exploit 7.5 HighJanuary 1, 2024
• codename065 download manager Download Manager < 3.2.71 - Broken Access Controls CVE-2023-1524 6.5 MediumMay 30, 2023
• codename065 download manager Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure CVE-2023-1809 7.5 HighMay 2, 2023
• codename065 download manager Download Manager < 3.2.62 - Contributor+ Stored XSS CVE-2022-4476 5.4 MediumJanuary 16, 2023
• cminds cm download manager CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload CVE-2022-3076 7.2 HighSeptember 26, 2022
• adobe download manager Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal CVE-2022-2926 4.9 MediumSeptember 26, 2022
• codename065 download manager Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction CVE-2022-2362 7.5 HighAugust 22, 2022
• codename065 download manager Download Manager < 3.2.44 - Reflected Cross-Site Scripting CVE-2022-2168 6.1 MediumJuly 17, 2022
• codename065 download manager Download Manager < 3.2.39 - Unauthenticated brute force of files master key CVE-2022-0828 7.5 HighApril 11, 2022
• codename065 download manager Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure CVE-2021-25087 7.5 HighMarch 7, 2022
• codename065 download manager WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS CVE-2021-25069 8.8 HighFebruary 21, 2022
• unknown wordpress download manager, w3eden download manager +1 more Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site Scripting CVE-2021-24969 5.4 MediumDecember 27, 2021
• tammersoft shared files, unknown shared files – easy download manager and file sharing plugin with frontend file upload +1 more Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting CVE-2021-24856 4.8 MediumNovember 17, 2021
• unknown wordpress download manager, w3eden download manager +1 more WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting CVE-2021-24773 4.8 MediumNovember 1, 2021
• tammersoft shared files, unknown easy download manager and file sharing plugin with frontend file upload – a better media library — shared files +1 more Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting CVE-2021-24736 4.8 MediumOctober 18, 2021