Skip to contentW3eden Download Manager vulnerabilities
- codename065 download managerDownload Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard ShortcodeCVE-2025-43676.4 Medium
- codename065 download managerDownload Manager <= 3.2.98 - Admin+ Stored XSSCVE-2024-82844.8 Medium
- codename065 download managerDownload Manager < 3.3.07 - Unauthenticated Data ExposureCVE-2024-131264.6 Medium
- codename065 download managerDownload Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File OverwriteCVE-2025-17855.4 Medium
- codename065 download managerWordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerabilityCVE-2024-562174.3 Medium
- codename065 download managerDownload Manager < 3.3.03 - Admin+ Stored XSSCVE-2024-107064.8 Medium
- codename065 download managerDownload manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected FilesCVE-2024-117685.3 Medium
- codename065 download managerDownload Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-117407.3 High
- codename065 download managerDownload Manager < 3.3.00 - Contributor+ Stored XSSCVE-2024-84445.4 Medium
- codename065 download managerDownload Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-62086.4 Medium
- codename065 download managerDownload Manager <= 3.2.89 - Improper Authorization via protectMediaLibraryCVE-2024-20987.5 High
- codename065 download managerDownload Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site ScriptingCVE-2024-17664.4 Medium
- codename065 download managerDownload Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple ShortcodesCVE-2024-52666.4 Medium
- codename065 download managerDownload Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages ShortcodeCVE-2024-41606.4 Medium
- codename065 download managerWordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerabilityCVE-2024-321315.3 Medium
- codename065 download managerWordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-291146.5 Medium
- codename065 download managerDownload Manager <= 3.2.84 - Missing AuthorizationCVE-2023-67855.3 Medium
- codename065 download managerDownload Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-69546.4 Medium
- codename065 download managerDownload Manager < 3.2.83 - Unauthenticated Protected File Download Password LeakCVE-2023-6421Public exploit7.5 High
- codename065 download managerDownload Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-23056.4 Medium
- codename065 download managerDownload Manager < 3.2.71 - Broken Access ControlsCVE-2023-15246.5 Medium
- codename065 download managerDownload Manager Pro < 6.3.0 - Unauthenticated Sensitive Information DisclosureCVE-2023-18097.5 High
- codename065 download managerWordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)CVE-2022-458367.1 High
- codename065 download managerDownload Manager < 3.2.62 - Contributor+ Stored XSSCVE-2022-44765.4 Medium
- codename065 download managerDownload Manager <= 3.2.49 - Authenticated (Contributor+) PHAR DeserializationCVE-2022-24368.8 High
- codename065 download managerDownload Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File DeletionCVE-2022-24318.1 High
- w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 moreWordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesCVE-2022-362885.4 Medium
- w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 moreWordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-346585.4 Medium
- codename065 download managerDownload Manager < 3.2.50 - Bypass IP Address Blocking RestrictionCVE-2022-23627.5 High
- w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 moreWordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-343474.2 Medium
- codename065 download managerDownload Manager <= 3.2.46 - Contributor+ Cross-Site ScriptingCVE-2022-21016.4 Medium
- codename065 download managerDownload Manager < 3.2.44 - Reflected Cross-Site ScriptingCVE-2022-21686.1 Medium
- unspecified download manager plugin, w3eden download manager +1 moreDownload Manager Plugin cross-site request forgeryCVE-2017-200934.3 Medium
- codename065 download managerDownload Manager <= 3.2.42 - Reflected Cross-Site ScriptingCVE-2022-19856.1 Medium
- codename065 download managerDownload Manager < 3.2.39 - Unauthenticated brute force of files master keyCVE-2022-08287.5 High
- codename065 download managerWordpress Download Manager < 3.2.25 - Sensitive Information DisclosureCVE-2021-250877.5 High
- codename065 download managerWordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSSCVE-2021-250698.8 High
- unknown wordpress download manager, w3eden download manager +1 moreDownload Manager < 3.2.22 - Subscriber+ Stored Cross-Site ScriptingCVE-2021-249695.4 Medium
- unknown wordpress download manager, w3eden download manager +1 moreWordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site ScriptingCVE-2021-247734.8 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreWordPress Download Manager <= 3.1.24 Authenticated Directory TraversalCVE-2021-346386.5 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreWordPress Download Manager <= 3.1.24 Authenticated Arbitrary File UploadCVE-2021-346397.5 High
- w3eden download managerThe download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode...CVE-2019-15889Public exploitEPSS 11.4%6.1 Medium
- w3eden download managerThe download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a...CVE-2017-180326.1 Medium
- w3eden download managerThe basic_settings function in the download manager plugin for WordPress before 2.7.3 allows...CVE-2014-9260Public exploitEPSS 11.1%8.8 High
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreOpen redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote...CVE-2017-22176.1 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreCross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows...CVE-2017-22166.1 Medium
- w3eden download managerDirectory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows...CVE-2014-85855.0 Medium
- w3eden download managerCross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for...CVE-2013-7319Public exploit4.3 Medium