İçeriğe atla
Noroxi

WP-DownloadManager

wp-downloadmanager · eklenti

WP-DownloadManager için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

11 bilinen açık

son kayıt 5 Ağu 2026

Güvenlik açıkları

  • CVE-2026-18933

    wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

    Yüksek 7.2

  • CVE-2025-10747

    WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload

    Yüksek 7.2

  • CVE-2025-4799

    WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion

    Yüksek 7.2

  • CVE-2024-47341

    WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2013-2697

    Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack

    Orta 6.8

  • CVE-2026-2426

    WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter

    Orta 6.5

  • CVE-2022-25606

    WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Orta 5.4

  • CVE-2022-25605

    WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Orta 5.4

  • CVE-2021-44760

    WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2025-4798

    WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read

    Orta 4.9

  • CVE-2026-2419

    WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter

    Düşük 2.7

← Dizine dön