Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WP-DownloadManager — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in WP-DownloadManager, with AI-generated Chinese analysis, references, and POCs.

Vendor: Lester Chan

CVE IDTitleCVSSSeverityPublished
CVE-2026-2426 WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter CWE-22 6.5 Medium2026-02-18
CVE-2026-2419 WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter CWE-22 2.7 Low2026-02-18
CVE-2025-10747 WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload CWE-434 7.2 High2025-09-26
CVE-2025-4799 WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion CWE-36 7.2 High2025-06-11
CVE-2025-4798 WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read CWE-200 4.9 Medium2025-06-11
CVE-2024-47341 WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-10-06

All 6 known CVE vulnerabilities affecting WP-DownloadManager with full Chinese analysis, references, and POCs where available.