Vulnerabilities and security researches fordownload-manager download-manager

Direction: ascending

Jun 07, 2024

Download Manager # CVE-2021-24773

CVE, Research URL: CVE-2021-24773
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Nov 01, 2021
Research Description: The WordPress Download Manager WordPress plugin before 3.2.16 does not escape some of the Download settings when outputting them, allowing high privilege users to perform XSS attacks even when the unfiltered_html capability is disallowed
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2017-2216

CVE, Research URL: CVE-2017-2216
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jul 07, 2017
Research Description: Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2021-25087

CVE, Research URL: CVE-2021-25087
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Mar 07, 2022
Research Description: The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2021-25069

CVE, Research URL: CVE-2021-25069
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Feb 21, 2022
Research Description: The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before using it in a SQL statement, leading to a SQL injection, which can also be exploited to cause a Reflected Cross-Site Scripting issue
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2021-24969

CVE, Research URL: CVE-2021-24969
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Dec 27, 2021
Research Description: The WordPress Download Manager WordPress plugin before 3.2.22 does not sanitise and escape Template data before outputting it in various pages (such as admin dashboard and frontend). Due to the lack of authorisation and CSRF checks in the wpdm_save_template AJAX action, any authenticated users such as subscriber is able to call it and perform Cross-Site Scripting attacks
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2021-34638

CVE, Research URL: CVE-2021-34638
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 06, 2021
Research Description: Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a file containing configuration information or an uploaded JavaScript with an image extension This issue affects: WordPress Download Manager version 3.1.24 and prior versions.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2019-15889

CVE, Research URL: CVE-2019-15889
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Sep 03, 2019
Research Description: The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2017-18032

CVE, Research URL: CVE-2017-18032
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jan 16, 2018
Research Description: The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2014-8585

CVE, Research URL: CVE-2014-8585
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Nov 04, 2014
Research Description: Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the fname parameter to (1) views/file_download.php or (2) file_download.php.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-0828

CVE, Research URL: CVE-2022-0828
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Apr 11, 2022
Research Description: The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the download.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2021-34639

CVE, Research URL: CVE-2021-34639
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 06, 2021
Research Description: Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager version 3.1.24 and prior versions.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2014-9260

CVE, Research URL: CVE-2014-9260
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 07, 2017
Research Description: The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2017-2217

CVE, Research URL: CVE-2017-2217
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jul 07, 2017
Research Description: Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2013-7319

CVE, Research URL: CVE-2013-7319
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Feb 06, 2014
Research Description: Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-1985

CVE, Research URL: CVE-2022-1985
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jun 13, 2022
Research Description: The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. This is due to insufficient input sanitization and output escaping on the 'frameid' parameter found in the ~/src/Package/views/shortcode-iframe.php file.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-2926

CVE, Research URL: CVE-2022-2926
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Sep 26, 2022
Research Description: The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-34658

CVE, Research URL: CVE-2022-34658
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 23, 2022
Research Description: Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-34347

CVE, Research URL: CVE-2022-34347
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 22, 2022
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-2362

CVE, Research URL: CVE-2022-2362
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 22, 2022
Research Description: The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based download blocking restrictions.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-2431

CVE, Research URL: CVE-2022-2431
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Sep 06, 2022
Research Description: The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion in versions up to, and including 3.2.50. This is due to insufficient file type and path validation on the deleteFiles() function found in the ~/Admin/Menu/Packages.php file that triggers upon download post deletion. This makes it possible for contributor level users and above to supply an arbitrary file path via the 'file[files]' parameter when creating a download post and once the user deletes the post the supplied arbitrary file will be deleted. This can be used by attackers to delete the /wp-config.php file which will reset the installation and make it possible for an attacker to achieve remote code execution on the server.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-2101

CVE, Research URL: CVE-2022-2101
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jul 18, 2022
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter in versions up to, and including, 3.2.46 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor level permissions and above to inject arbitrary web scripts on the file's page that will execute whenever an administrator accesses the editor area for the injected file page.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-2168

CVE, Research URL: CVE-2022-2168
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jul 17, 2022
Research Description: The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-36288

CVE, Research URL: CVE-2022-36288
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Aug 23, 2022
Research Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-2436

CVE, Research URL: CVE-2022-2436
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Sep 06, 2022
Research Description: The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]' parameter in versions up to, and including 3.2.49. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-4476

CVE, Research URL: CVE-2022-4476
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jan 16, 2023
Research Description: The Download Manager WordPress plugin before 3.2.62 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2022-45836

CVE, Research URL: CVE-2022-45836
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Apr 18, 2023
Research Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2023-6785

CVE, Research URL: CVE-2023-6785
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Mar 13, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in all versions up to, and including, 3.2.84. This makes it possible for unauthenticated attackers to download files added with the plugin (even when privately published).
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2023-6954

CVE, Research URL: CVE-2023-6954
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Mar 13, 2024
Research Description: The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.2.85 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2024-29114

CVE, Research URL: CVE-2024-29114
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Mar 19, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2023-2305

CVE, Research URL: CVE-2023-2305
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jun 09, 2023
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_members', 'wpdm_login_form', 'wpdm_reg_form' shortcodes in versions up to, and including, 3.2.70 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2023-1809

CVE, Research URL: CVE-2023-1809
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: May 02, 2023
Research Description: The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2023-1524

CVE, Research URL: CVE-2023-1524
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: May 30, 2023
Research Description: The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files. Upon validation, a master key is generated and exposed to the user, which may be used to download any password-protected file on the server, allowing a user to download any file with the knowledge of any one file's password.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2023-6421

CVE, Research URL: CVE-2023-6421
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jan 01, 2024
Research Description: The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2024-32131

CVE, Research URL: CVE-2024-32131
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: May 17, 2024
Research Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2024-4160

CVE, Research URL: CVE-2024-4160
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: May 31, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm-all-packages' shortcode in all versions up to, and including, 3.2.90 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Jun 10, 2024

Download Manager # CVE-2024-4001

CVE, Research URL: CVE-2024-4001
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jun 05, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_modal_login_form' shortcode in all versions up to, and including, 3.2.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Jun 13, 2024

Download Manager # CVE-2024-1766

CVE, Research URL: CVE-2024-1766
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jun 12, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's Display Name in all versions up to, and including, 3.2.86 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires social engineering to successfully exploit, and the impact would be very limited due to the attacker requiring a user to login as the user with the injected payload for execution.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2024-5266

CVE, Research URL: CVE-2024-5266
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jun 12, 2024
Research Description: The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpdm_user_dashboard, wpdm_package, wpdm_packages, wpdm_search_result, and wpdm_tag shortcodes in all versions up to, and including, 3.2.92 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Jul 22, 2024

Download Manager # CVE-2024-2098

CVE, Research URL: CVE-2024-2098
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jun 13, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected files.
Affected versions: Min -, max -.
Status: vulnerable

Aug 01, 2024

Download Manager # CVE-2024-6208

CVE, Research URL: CVE-2024-6208
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Jul 31, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_all_packages' shortcode in all versions up to, and including, 3.2.97 due to insufficient input sanitization and output escaping on the 'cols' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Oct 20, 2024

Download Manager # CVE-2024-8284

CVE, Research URL: CVE-2024-8284
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: -
Research Description: Download Manager [download-manager] < 3.2.99 CVE-2024-8284
Affected versions: Min -, max -.
Status: vulnerable

Oct 31, 2024

Download Manager # CVE-2024-8444

CVE, Research URL: CVE-2024-8444
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Oct 30, 2024
Research Description: The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.
Affected versions: Min -, max -.
Status: vulnerable

Dec 21, 2024

Download Manager # CVE-2024-11768

CVE, Research URL: CVE-2024-11768
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Dec 19, 2024
Research Description: The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2024-11740

CVE, Research URL: CVE-2024-11740
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Dec 19, 2024
Research Description: The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Affected versions: Min -, max -.
Status: vulnerable

Jan 02, 2025

Download Manager # CVE-2024-56217

CVE, Research URL: CVE-2024-56217
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Dec 31, 2024
Research Description: Missing Authorization vulnerability in W3 Eden, Inc. Download Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through 3.3.03.
Affected versions: Min -, max -.
Status: vulnerable

Mar 14, 2025

Download Manager # CVE-2025-1785

CVE, Research URL: CVE-2025-1785
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Mar 13, 2025
Research Description: The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.08 via the 'wpdm_newfile' action. This makes it possible for authenticated attackers, with Author-level access and above, to overwrite select file types outside of the originally intended directory, which may cause a denial of service.
Affected versions: Min -, max -.
Status: vulnerable

Mar 19, 2025

Download Manager # CVE-2024-13126

CVE, Research URL: CVE-2024-13126
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Mar 16, 2025
Research Description: The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htaccess, allowing unauthorized access of files.
Affected versions: Min -, max -.
Status: vulnerable

Apr 19, 2025

Download Manager # CVE-2025-3056

CVE, Research URL: CVE-2025-3056
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Apr 18, 2025
Research Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.3.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
Affected versions: Min -, max -.
Status: vulnerable

Download Manager # CVE-2025-3404

CVE, Research URL: CVE-2025-3404
Home page URL: Security reports for Download Manager
Application: Download Manager
Date: Apr 19, 2025
Research Description: The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the savePackage function in all versions up to, and including, 3.3.12. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
Affected versions: Min -, max -.
Status: vulnerable