CVE-2025-4799
Published Jun 11, 2025The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to,…
Vendor archive
wp-downloadmanager_project CVEs
Beta · best-effort6 CVEs tagged to vendor wp-downloadmanager_project — 0 Critical, 1 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2025-4798
Published Jun 11, 2025The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10. This is due to a lack of restriction on the directo…
CVE-2022-25606
Published Mar 25, 2022Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vulnerable parameters &download_pa…
CVE-2022-25605
Published Mar 18, 2022Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vvulnerable parameters &download_p…
CVE-2021-44760
Published Mar 18, 2022Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.
CVE-2020-24141
Published Jul 7, 2021Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application v…
Showing 1-6 of 6 CVEsPage 1 of 1