CM Download Manager

cm-download-manager · plugin

Known security vulnerabilities for CM Download Manager. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Apr 1, 2025

Vulnerabilities

CVE-2025-30910
WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerability
High 8.6
CVE-2020-24146
Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitr
High 8.1
CVE-2020-24145
Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attac
Medium 6.1
CVE-2020-27344
The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.
Medium 6.1