WP-DownloadManager

Уязвимости

• CVE-2026-18933

  wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

  Высокий 7.2

• CVE-2025-10747

  WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload

  Высокий 7.2

• CVE-2025-4799

  WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion

  Высокий 7.2

• CVE-2024-47341

  WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2013-2697

  Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack

  Средний 6.8

• CVE-2026-2426

  WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter

  Средний 6.5

• CVE-2022-25606

  WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

  Средний 5.4

• CVE-2022-25605

  WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

  Средний 5.4

• CVE-2021-44760

  WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2025-4798

  WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read

  Средний 4.9

• CVE-2026-2419

  WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter

  Низкий 2.7