codename065 Download Manager vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20231
3. 202410
4. 20257
5. 202614

Newest CVEs

• CVE-2026-12054

  Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter

  codename065 · Download Manager

  Medium6.1
• CVE-2026-9696

  Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode

  codename065 · Download Manager

  Medium6.4
• CVE-2026-103964

  Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email

  codename065 · Download Manager

  Medium4.3
• CVE-2026-102401

  Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute

  codename065 · Download Manager

  Medium6.4
• CVE-2026-97338

  Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name

  codename065 · Download Manager

  Medium6.4
• CVE-2026-92714

  Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter

  codename065 · Download Manager

  Medium6.5
• CVE-2026-16685

  Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attribute

  codename065 · Download Manager

  Medium6.4
• CVE-2026-14343

  Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes

  codename065 · Download Manager

  Medium6.4
• CVE-2026-13733

  Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute

  codename065 · Download Manager

  Medium6.4
• CVE-2026-4057

  Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal

  codename065 · Download Manager

  Medium4.3