CVE-2022-25606

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-5-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities · Third Party Advisory
• wordpress.org/plugins/wp-downloadmanager · Third Party Advisory

Lỗ hổng khác của wp-downloadmanager

• CVE-2025-4799CAO 7.2The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can …
• CVE-2025-4798TRUNG BÌNH 4.9The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10. This is due …
• CVE-2022-25605TRUNG BÌNH 5.4Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68…
• CVE-2021-44760TRUNG BÌNH 5.4Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.
• CVE-2020-24141TRUNG BÌNH 5.3Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end s…