Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 102
Reset filtersDownload Manager <= 3.2.82 - Unauthenticated Password Leak
Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Download Manager <= 3.2.70 - Insufficient Authorization to Information Disclosure
Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure
Download Manager <= 3.2.61 - Authenticated (Contributor+) Stored Cross-Site Scripting
Download Manager <= 3.2.59 - Refleced Cross-Site Scripting
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload
Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
Download Manager <= 3.2.53 - Reflected Cross-Site Scripting
Download Manager <= 3.2.48 - Cross-Site Request Forgery
Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update
Download Manager <= 3.2.49 - IP Blocking Bypass
Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion
Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
Download Manager <= 3.2.38 - Unauthenticated Brute Force of File Master Key
Download Manager <= 3.2.34 - Sensitive Information Disclosure
WordPress Download Manager <= 3.2.33 - Authenticated SQL Injection
WordPress Download Manager <= 3.2.21 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.