Vulnerabilities > W3Eden > Download Manager > 3.2.71
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-13 | CVE-2023-6954 | Cross-site Scripting vulnerability in W3Eden Download Manager The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.2.85 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-01-01 | CVE-2023-6421 | Insufficiently Protected Credentials vulnerability in W3Eden Download Manager The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one. | 7.5 |