W3eden vulnerabilities

Products

• Download Manager 48
• Live Forms 2

Newest

• codename065 download manager Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode CVE-2025-4367 6.4 MediumJune 19, 2025
• codename065 download manager Download Manager <= 3.2.98 - Admin+ Stored XSS CVE-2024-8284 4.8 MediumMay 15, 2025
• codename065 download manager Download Manager < 3.3.07 - Unauthenticated Data Exposure CVE-2024-13126 4.6 MediumMarch 16, 2025
• codename065 download manager Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite CVE-2025-1785 5.4 MediumMarch 13, 2025
• codename065 download manager WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability CVE-2024-56217 4.3 MediumDecember 31, 2024
• codename065 download manager Download Manager < 3.3.03 - Admin+ Stored XSS CVE-2024-10706 4.8 MediumDecember 20, 2024
• codename065 download manager Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files CVE-2024-11768 5.3 MediumDecember 19, 2024
• codename065 download manager Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-11740 7.3 HighDecember 19, 2024
• codename065 download manager Download Manager < 3.3.00 - Contributor+ Stored XSS CVE-2024-8444 5.4 MediumOctober 30, 2024
• codename065 download manager Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-6208 6.4 MediumJuly 31, 2024
• codename065 download manager Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary CVE-2024-2098 7.5 HighJune 13, 2024
• codename065 download manager Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting CVE-2024-1766 4.4 MediumJune 12, 2024
• codename065 download manager Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes CVE-2024-5266 6.4 MediumJune 12, 2024
• codename065 download manager Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode CVE-2024-4160 6.4 MediumMay 31, 2024
• codename065 download manager WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability CVE-2024-32131 5.3 MediumMay 17, 2024
• codename065 download manager WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability CVE-2024-29114 6.5 MediumMarch 19, 2024
• codename065 download manager Download Manager <= 3.2.84 - Missing Authorization CVE-2023-6785 5.3 MediumMarch 13, 2024
• codename065 download manager Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-6954 6.4 MediumMarch 13, 2024
• codename065 download manager Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak CVE-2023-6421 Public exploit 7.5 HighJanuary 1, 2024
• codename065 download manager Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-2305 6.4 MediumJune 9, 2023
• codename065 download manager Download Manager < 3.2.71 - Broken Access Controls CVE-2023-1524 6.5 MediumMay 30, 2023
• codename065 download manager Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure CVE-2023-1809 7.5 HighMay 2, 2023
• codename065 download manager WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45836 7.1 HighApril 18, 2023
• codename065 download manager Download Manager < 3.2.62 - Contributor+ Stored XSS CVE-2022-4476 5.4 MediumJanuary 16, 2023
• codename065 download manager Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization CVE-2022-2436 8.8 HighSeptember 6, 2022
• codename065 download manager Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion CVE-2022-2431 8.1 HighSeptember 6, 2022
• w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 more WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities CVE-2022-36288 5.4 MediumAugust 23, 2022
• w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 more WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities CVE-2022-34658 5.4 MediumAugust 23, 2022
• codename065 download manager Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction CVE-2022-2362 7.5 HighAugust 22, 2022
• w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 more WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-34347 4.2 MediumAugust 22, 2022
• codename065 download manager Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting CVE-2022-2101 6.4 MediumJuly 18, 2022
• codename065 download manager Download Manager < 3.2.44 - Reflected Cross-Site Scripting CVE-2022-2168 6.1 MediumJuly 17, 2022
• unspecified download manager plugin, w3eden download manager +1 more Download Manager Plugin cross-site request forgery CVE-2017-20093 4.3 MediumJune 24, 2022
• codename065 download manager Download Manager <= 3.2.42 - Reflected Cross-Site Scripting CVE-2022-1985 6.1 MediumJune 13, 2022
• w3 eden, inc. pricing table (wordpress plugin), w3eden pricing table +1 more WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2021-36896 4.8 MediumApril 11, 2022
• codename065 download manager Download Manager < 3.2.39 - Unauthenticated brute force of files master key CVE-2022-0828 7.5 HighApril 11, 2022
• codename065 download manager Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure CVE-2021-25087 7.5 HighMarch 7, 2022
• codename065 download manager WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS CVE-2021-25069 8.8 HighFebruary 21, 2022
• unknown wordpress download manager, w3eden download manager +1 more Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site Scripting CVE-2021-24969 5.4 MediumDecember 27, 2021
• unknown wordpress download manager, w3eden download manager +1 more WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting CVE-2021-24773 4.8 MediumNovember 1, 2021
• w3 eden, inc. wordpress download manager, w3eden download manager +1 more WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal CVE-2021-34638 6.5 MediumAugust 5, 2021
• w3 eden, inc. wordpress download manager, w3eden download manager +1 more WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload CVE-2021-34639 7.5 HighAugust 5, 2021
• w3eden download manager The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode... CVE-2019-15889 Public exploit EPSS 11.4% 6.1 MediumSeptember 3, 2019
• w3eden live forms The liveforms plugin before 3.4.0 for WordPress has XSS. CVE-2017-18497 6.1 MediumAugust 13, 2019
• w3eden live forms The liveforms plugin before 3.2.0 for WordPress has SQL injection. CVE-2015-9301 9.8 CriticalAugust 13, 2019
• w3eden download manager The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a... CVE-2017-18032 6.1 MediumJanuary 16, 2018
• w3eden download manager The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows... CVE-2014-9260 Public exploit EPSS 11.1% 8.8 HighAugust 7, 2017
• w3 eden, inc. wordpress download manager, w3eden download manager +1 more Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote... CVE-2017-2217 6.1 MediumJuly 7, 2017
• w3 eden, inc. wordpress download manager, w3eden download manager +1 more Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows... CVE-2017-2216 6.1 MediumJuly 7, 2017
• w3eden download manager Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows... CVE-2014-8585 5.0 MediumNovember 4, 2014
• Show olderLoading…