Skip to content
Unknown Download Manager
-
CVE-2026-86611
Medium 4.3
Download Manager (Free & Pro) - Privacy Settings Update via CSRF
0.1%
-
CVE-2026-86610
Medium 6.4
Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon
0.2%
-
CVE-2026-86609
High 8.8
Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription
0.3%
-
CVE-2026-14292
Medium 5.4
WordPress Download Manager < 3.3.66 - Author+ Stored XSS via Package Title
0.3%
-
CVE-2026-14235
High 7.5
WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key
0.4%
-
CVE-2024-8284
Medium 4.8
Download Manager <= 3.2.98 - Admin+ Stored XSS
0.4%
-
CVE-2024-13126
Medium 4.6
Download Manager < 3.3.07 - Unauthenticated Data Exposure
0.5%
-
CVE-2024-10706
Medium 4.8
Download Manager < 3.3.03 - Admin+ Stored XSS
0.3%
-
CVE-2024-8444
Medium 5.4
Download Manager < 3.3.00 - Contributor+ Stored XSS
0.3%
-
CVE-2023-6421
High 7.5
Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
2.4%
-
CVE-2023-1524
Medium 6.5
Download Manager < 3.2.71 - Broken Access Controls
0.7%
-
CVE-2023-1809
High 7.5
Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
0.7%
-
CVE-2022-4476
Medium 5.4
Download Manager < 3.2.62 - Contributor+ Stored XSS
0.6%
-
CVE-2022-2926
Medium 4.9
Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
1.7%
-
CVE-2022-2362
Unrated
Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction
1.2%
-
CVE-2022-2168
Unrated
Download Manager < 3.2.44 - Reflected Cross-Site Scripting
1.4%
-
CVE-2022-0828
Unrated
Download Manager < 3.2.39 - Unauthenticated brute force of files master key
1.5%
-
CVE-2021-25087
Unrated
Wordpress Download Manager < 3.2.25 - Sensitive Information Disclosure
1.5%
-
CVE-2021-25069
Unrated
WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS
1.5%