Known vulnerabilities in WordPress Download Manager

Vendor: W3 Eden
Software CPE: cpe:2.3:a:codename065:download-manager:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WordPress Download Manager WordPress Download Manager is affected by 15 known vulnerabilities: 8 medium, 7 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-3404
CWE-22 Medium
No
No
3.3.13 06.05.2025 SB2025050641
#VU108694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3056
CWE-79 Low
No
No
3.3.13 06.05.2025 SB2025050641
#VU66996 - Deserialization of Untrusted Data
CVE-2022-2436
CWE-502 Medium
No
No
3.2.50 06.09.2022 SB2022090617
#VU64748 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-2101
CWE-79 Low
No
No
3.2.44 28.06.2022 SB2022062830
#VU64111 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1985
CWE-79 Low
No
No
3.2.43 09.06.2022 SB2022060910
#VU56033 -
CVE-2021-34638
Medium
No
No
3.1.25 23.08.2021 SB2021082306
#VU56032 - Unrestricted Upload of File with Dangerous Type
CVE-2021-34639
CWE-434 Medium
No
No
3.1.25 23.08.2021 SB2021082306
#VU20613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.9.52 02.09.2019 SB2017061608
#VU19837 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.7.95 02.08.2019 SB2015071603
#VU19766 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
2.9.46 02.08.2019 SB2017030104
#VU19744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-2216
CWE-79 Low
No
No
2.9.50 02.08.2019 SB2017071311
#VU19700 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
2.9.61 02.08.2019 SB2018010924
#VU18865 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.9.97 21.06.2019 SB2019062407
#VU18398 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.9.94 06.05.2019 SB2019050618
#VU18317 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.9.94 18.04.2019 SB2019041819