| Package | Affected versions | Patched versions |
|---|---|---|
| download manager | < 2.9.94 | 2.9.94 |
The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free