gamerz

Products

ProductCVEsExploitedLatest
WP-DownloadManager5–Feb 18, 2026
WP-UserOnline2–Sep 6, 2022
WP-Polls1–Jan 22, 2025
WP-Stats1–Aug 14, 2026

Exploited and recent CVEs

  • CVE-2026-19794 High 7.2 WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2026-2426 Medium 6.5 WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter 1.4%
  • CVE-2026-2419 Low 2.7 WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter 0.8%
  • CVE-2025-10747 High 7.2 WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload 0.7%
  • CVE-2025-4799 High 7.2 WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion 0.9%
  • CVE-2025-4798 Medium 4.9 WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read 0.4%
  • CVE-2024-13426 Medium 5.4 WP-Polls <= 2.77.2 - Unauthenticated SQL Injection to Stored Cross-Site Scripting 0.5%
  • CVE-2022-2941 Medium 5.5 WP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting 7.8%
  • CVE-2022-2473 Medium 5.5 WP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting 1.4%