Unknown Download Manager vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 20233
3. 20243
4. 20252
5. 20265

Newest CVEs

• CVE-2026-86611

  Download Manager (Free & Pro) - Privacy Settings Update via CSRF

  Unknown · Download Manager

  Medium4.3
• CVE-2026-86610

  Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon

  Unknown · Download Manager

  Medium6.4
• CVE-2026-86609

  Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription

  Unknown · Download Manager

  High8.8
• CVE-2026-14292

  WordPress Download Manager < 3.3.66 - Author+ Stored XSS via Package Title

  Unknown · Download Manager

  Medium5.4
• CVE-2026-14235

  WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key

  Unknown · Download Manager

  High7.5
• CVE-2024-8284

  Download Manager <= 3.2.98 - Admin+ Stored XSS

  Unknown · Download Manager

  Medium4.8
• CVE-2024-13126

  Download Manager < 3.3.07 - Unauthenticated Data Exposure

  Unknown · Download Manager

  Medium4.6
• CVE-2024-10706

  Download Manager < 3.3.03 - Admin+ Stored XSS

  Unknown · Download Manager

  Medium4.8
• CVE-2024-8444

  Download Manager < 3.3.00 - Contributor+ Stored XSS

  Unknown · Download Manager

  Medium5.4
• CVE-2023-6421

  Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

  Unknown · Download Manager

  High7.5