Vulnerabilities > W3Eden > Download Manager > 3.2.41
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-08-22 | CVE-2022-2362 | Unspecified vulnerability in W3Eden Download Manager The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based download blocking restrictions. | 7.5 |
| 2022-08-22 | CVE-2022-34347 | Cross-Site Request Forgery (CSRF) vulnerability in W3Eden Download Manager Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress. | 8.8 |
| 2022-07-18 | CVE-2022-2101 | Unspecified vulnerability in W3Eden Download Manager The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter in versions up to, and including, 3.2.46 due to insufficient input sanitization and output escaping. | 5.4 |
| 2022-07-17 | CVE-2022-2168 | Cross-site Scripting vulnerability in W3Eden Download Manager The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting | 6.1 |
| 2022-06-13 | CVE-2022-1985 | Unspecified vulnerability in W3Eden Download Manager The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. | 6.1 |