w3eden

Top products

The 15 most recently published vulnerabilities affecting w3eden.

• CVE-2025-4367Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode6.4Jun 19, 2025
• CVE-2024-8284Download Manager <= 3.2.98 - Admin+ Stored XSS4.8May 15, 2025
• CVE-2024-13126Download Manager < 3.3.07 - Unauthenticated Data Exposure4.6Mar 16, 2025
• CVE-2025-1785Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite5.4Mar 13, 2025
• CVE-2024-56217WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability4.3Dec 31, 2024
• CVE-2024-10706Download Manager < 3.3.03 - Admin+ Stored XSS4.8Dec 20, 2024
• CVE-2024-11768Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files5.3Dec 19, 2024
• CVE-2024-11740Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution7.3Dec 19, 2024
• CVE-2024-8444Download Manager < 3.3.00 - Contributor+ Stored XSS5.4Oct 30, 2024
• CVE-2024-6208Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4Jul 31, 2024
• CVE-2024-2098Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary7.5Jun 13, 2024
• CVE-2024-1766Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting4.4Jun 12, 2024
• CVE-2024-5266Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes6.4Jun 12, 2024
• CVE-2024-4160Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode6.4May 31, 2024
• CVE-2024-32131WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability5.3May 17, 2024