W3 Eden Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Download Manager | 3 | – | May 17, 2024 |
| Download Manager (WordPress plugin) | 3 | – | Aug 23, 2022 |
| WordPress Download Manager | 2 | – | Aug 5, 2021 |
| Premium Packages | 1 | – | Mar 27, 2024 |
| Pricing Table (WordPress plugin) | 1 | – | Apr 11, 2022 |
Exploited and recent CVEs
- CVE-2024-32131 WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability 0.4%
- CVE-2024-29924 WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-29114 WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2022-45836 WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS) 0.7%
- CVE-2022-36288 WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 0.3%
- CVE-2022-34658 WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities 0.6%
- CVE-2022-34347 WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability 0.4%
- CVE-2021-36896 WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%
- CVE-2021-34638 WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal 1.3%
- CVE-2021-34639 WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload 0.6%