W3 Eden Inc.

Products

ProductCVEsExploitedLatest
Download Manager3–May 17, 2024
Download Manager (WordPress plugin)3–Aug 23, 2022
WordPress Download Manager2–Aug 5, 2021
Premium Packages1–Mar 27, 2024
Pricing Table (WordPress plugin)1–Apr 11, 2022

Exploited and recent CVEs

  • CVE-2024-32131 Medium 5.3 WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability 0.4%
  • CVE-2024-29924 High 7.1 WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-29114 Medium 6.5 WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2022-45836 High 7.1 WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS) 0.7%
  • CVE-2022-36288 Medium 5.4 WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 0.3%
  • CVE-2022-34658 Medium 5.4 WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities 0.6%
  • CVE-2022-34347 Medium 4.2 WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability 0.4%
  • CVE-2021-36896 Medium 4.8 WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%
  • CVE-2021-34638 Medium 6.5 WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal 1.3%
  • CVE-2021-34639 High 7.5 WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload 0.6%